{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "record": { "id": "JVNVU98747108", "aliases": [], "title": "産業・医療向け20件の告知：機器別の更新と、修正待ちの対応", "summary": "カメラ・映像配信装置、Siemensの制御・管理製品、医療向けIRIS for Healthの告知です。製品名と版を照合し、下の同じ製品の更新先だけを使ってください。サーバー側で対応済みのMeariと、機器更新が必要な製品、修正待ちの製品を分けています。", "risk": "製品ごとに、管理情報を見られる、不正な処理を動かされる、機器や通信が止まるなどの問題があります。例えばWinCCはデータベースへの認証済みアクセス、S7のWebサーバーは権限のある利用者のブラウザー操作、IRISは暗号化せず通信できる設定が関係します。同じ危険が20件すべてに当てはまるわけではありません。", "product": "CISA ICS Advisory / ICS Medical Advisory（2026年10月22日）", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": null, "cvssVector": null, "affected": [], "fixed": [], "steps": [ "Meariはサーバー修正の適用済み状況を確認し、CloudEdgeをApp StoreまたはGoogle Playの最新アプリへ更新します。Kiloview E3はV1.30、App Publisherは1.27.9、Software Centerは4.0.9.8以降へ更新します。Software Centerは次回起動時に自動更新されるとされています。", "Capital AR Classic R20-11は2303以降へ、SENTRONは5.2以降へ、PSS SINCAL V22.5はUpdate 5以降へ更新します。Capital 431-422は修正予定なし、SINCAL V21.5/V22.0は修正版未提供のため、それぞれ移行方針を提供元と決めてください。", "IPCのBIOSは、BX-21Aが31.01.13以降、RW-543Aが1.1.4以降、IPC227G・277G・277G PRO・327G・377Gが28.01.15以降へ更新します。別型番用のBIOSを流用しません。更新後はBIOSの既定設定を読み込みます。Secure Boot鍵を既に登録していた場合は、その後に鍵を登録し直す必要があります。担当者が現在の起動設定と鍵の復元手順を確認して実施してください。", "PXC CompactはBACnet 3.5.7以降、P2 2.8.21以降へ更新します。APOGEEのMBC/MEC PPC BACnet/P2は修正予定なしです。ほかのAPOGEE/TALON/Desigo型番も同じ番号と判断せず、機器の完全な型番を保守担当者へ渡して対応を依頼してください。", "Device Kitは該当系列の1.26.2-1、1.27.1-1、1.28.0-6以降へ更新します。旧系列には修正予定なしの区分があります。機器に組み込まれたKitは開発用Kitだけ更新しても機器へ反映されないため、機器メーカーの更新を確認します。.NET Client Libraryは3.3.61と3.3.62の両修正が入った版を利用します。", "RUGGEDCOM CROSSBOWとCROSSBOW SACは、それぞれ製品の6.0以降へ更新します。内蔵ライブラリーの修正番号を機器ファームウェアの番号として使わないでください。", "WinCC V8.0はUpdate 11以降、V8.1はUpdate 7以降へ更新します。V7.5はこの告知時点で修正版がないため、提供元と移行・接続制限を検討してください。", "Industrial Edge Devicesは型番に合わせ、IECD・IEOD・IEVDを1.28.1以降、IOT2050 Advanced/SM・BX-21Aを1.28.1-2以降、BX-39A・BX-59A・IPC127Eを3.2.0-17以降へ更新します。SCALANCEやHMIの修正待ち区分へ、これらの更新を流用しません。", "Nozomi Guardian/CMC搭載APE1808は、Siemensの顧客サポートへパッチと更新情報を依頼します。CPU 1518 V3.1.7、TM MFP V1.1.1、S7 Webサーバーの告知には、この公表時点で修正版未提供の区分があります。", "IRIS for Healthは担当者がIRIS superserverのTLS設定を「Required」にします。「Enabled」は暗号化しない接続も許可するため、TLS必須化の代わりにはなりません。接続するアプリ側もTLSで接続できることを確認します。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-05", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-07", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-16", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-14", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01", "label": "公的機関・開発元の個別告知" }, { "url": "https://jvn.jp/vu/JVNVU98747108/", "label": "JVN：関連する公式告知の一覧" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2026-10-23T02:00:00.000Z", "modifiedAt": "2026-10-23T02:00:00.000Z", "fetchedAt": "2026-10-23T03:17:49.705Z", "exploitStatus": "unknown", "sources": [ "JVN" ], "originalText": "米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。", "sourceTitle": "CISA ICS Advisory / ICS Medical Advisory（2026年10月22日）", "summaryMethod": "公式資料を照合した個別の日本語解説。一般的な操作手順は別に区別しています。", "state": "published", "sourceSnapshots": [ { "source": "JVN", "modifiedAt": "2026-10-23T02:00:00.000Z", "fetchedAt": "2026-10-23T02:17:50.489Z", "state": "published" }, { "source": "JVN", "modifiedAt": "2026-10-23T02:00:00.000Z", "fetchedAt": "2026-10-23T03:17:49.705Z", "state": "published" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "JVNVU98747108", "sourceType": "JVN", "sourceUrl": "https://jvn.jp/vu/JVNVU98747108/", "fetchedAt": "2026-10-23T02:43:54.026Z", "publishedAt": "2026-10-22T15:00:00.000Z", "modifiedAt": "2026-10-22T15:00:00.000Z", "sourceDatePrecision": "day", "state": "published", "provider": "JVN / JPCERT/CC / IPA", "title": "JVNVU#98747108\n\nCISA ICS Advisory / ICS Medical Advisory（2026年10月22日）", "descriptions": [ { "lang": "ja", "value": "米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。", "sourcePath": "section:概要" }, { "lang": "ja", "value": "新規：19件\n\nICSA-26-295-01: Kiloview E3 NDI Encoder\n\nICSA-26-295-02: Siemens Industrial Edge App Publisher\n\nICSA-26-295-03: Siemens Software Center\n\nICSA-26-295-04: Siemens Capital Embedded AR Classic\n\nICSA-26-295-05: Siemens SENTRON 3NA COM Fuse\n\nICSA-26-295-06: Siemens PSS(R)SINCAL\n\nICSA-26-295-07: Siemens SIMATIC IPCs\n\nICSA-26-295-08: Siemens APOGEE, TALON and Desigo PXC/PXM Products\n\nICSA-26-295-09: Siemens Industrial Edge Device Kit\n\nICSA-26-295-10: Siemens SIMATIC S7 Webserver API\n\nICSA-26-295-11: Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP\n\nICSA-26-295-12: Siemens RUGGEDCOM CROSSBOW\n\nICSA-26-295-13: Siemens WinCC\n\nICSA-26-295-14: Siemens SIMATIC S7 PLCs Web Server\n\nICSA-26-295-15: Siemens RUGGEDCOM CROSSBOW Station Access Controller\n\nICSA-26-295-16: Siemens SIMATIC S7-1500 TM MFP\n\nICSA-26-295-17: Siemens Industrial Edge Devices\n\nICSA-26-295-18: Siemens RUGGEDCOM APE1808 Devices\n\nICSMA-26-295-01: InterSystems Corporation InterSystems IRIS for Health\n\n更新：1件\n\nICSA-26-274-06: Meari IoT Cloud Platform OpenAPI Service (Update A)", "sourcePath": "section:詳細情報" }, { "lang": "ja", "value": "ICS Advisory / ICS Medical Advisoryを参照してください。", "sourcePath": "section:想定される影響" } ], "affected": [], "affectedStatements": [ { "lang": "ja", "value": "ICS Advisory / ICS Medical Advisoryを参照してください。", "sourcePath": "section:影響を受けるシステム" } ], "solutions": [ { "lang": "ja", "value": "ICS Advisory / ICS Medical Advisoryを参照してください。", "sourcePath": "section:対策方法" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [], "metrics": [], "references": [ { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-05", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-07", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-14", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-16", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://jvndb.jvn.jp/", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://jvndb.jvn.jp/apis/myjvn/index.html", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" }, { "url": "https://www.ipa.go.jp/security/todokede/vuln/uketsuke.html", "label": "JVN掲載の参考情報", "tags": [], "provider": "JVN", "sourcePath": "a[href]" } ], "sections": [ { "heading": "概要", "value": "米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。", "sourcePath": "section:概要" }, { "heading": "影響を受けるシステム", "value": "ICS Advisory / ICS Medical Advisoryを参照してください。", "sourcePath": "section:影響を受けるシステム" }, { "heading": "詳細情報", "value": "新規：19件\n\nICSA-26-295-01: Kiloview E3 NDI Encoder\n\nICSA-26-295-02: Siemens Industrial Edge App Publisher\n\nICSA-26-295-03: Siemens Software Center\n\nICSA-26-295-04: Siemens Capital Embedded AR Classic\n\nICSA-26-295-05: Siemens SENTRON 3NA COM Fuse\n\nICSA-26-295-06: Siemens PSS(R)SINCAL\n\nICSA-26-295-07: Siemens SIMATIC IPCs\n\nICSA-26-295-08: Siemens APOGEE, TALON and Desigo PXC/PXM Products\n\nICSA-26-295-09: Siemens Industrial Edge Device Kit\n\nICSA-26-295-10: Siemens SIMATIC S7 Webserver API\n\nICSA-26-295-11: Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP\n\nICSA-26-295-12: Siemens RUGGEDCOM CROSSBOW\n\nICSA-26-295-13: Siemens WinCC\n\nICSA-26-295-14: Siemens SIMATIC S7 PLCs Web Server\n\nICSA-26-295-15: Siemens RUGGEDCOM CROSSBOW Station Access Controller\n\nICSA-26-295-16: Siemens SIMATIC S7-1500 TM MFP\n\nICSA-26-295-17: Siemens Industrial Edge Devices\n\nICSA-26-295-18: Siemens RUGGEDCOM APE1808 Devices\n\nICSMA-26-295-01: InterSystems Corporation InterSystems IRIS for Health\n\n更新：1件\n\nICSA-26-274-06: Meari IoT Cloud Platform OpenAPI Service (Update A)", "sourcePath": "section:詳細情報" }, { "heading": "想定される影響", "value": "ICS Advisory / ICS Medical Advisoryを参照してください。", "sourcePath": "section:想定される影響" }, { "heading": "対策方法", "value": "ICS Advisory / ICS Medical Advisoryを参照してください。", "sourcePath": "section:対策方法" } ], "snippets": [ { "evidenceId": "official:section:概要", "sourceUrl": "https://jvn.jp/vu/JVNVU98747108/", "sourcePath": "section:概要", "text": "米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:section:影響を受けるシステム", "sourceUrl": "https://jvn.jp/vu/JVNVU98747108/", "sourcePath": "section:影響を受けるシステム", "text": "ICS Advisory / ICS Medical Advisoryを参照してください。", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:section:詳細情報", "sourceUrl": "https://jvn.jp/vu/JVNVU98747108/", "sourcePath": "section:詳細情報", "text": "新規：19件\n\nICSA-26-295-01: Kiloview E3 NDI Encoder\n\nICSA-26-295-02: Siemens Industrial Edge App Publisher\n\nICSA-26-295-03: Siemens Software Center\n\nICSA-26-295-04: Siemens Capital Embedded AR Classic\n\nICSA-26-295-05: Siemens SENTRON 3NA COM Fuse\n\nICSA-26-295-06: Siemens PSS(R)SINCAL\n\nICSA-26-295-07: Siemens SIMATIC IPCs\n\nICSA-26-295-08: Siemens APOGEE, TALON and Desigo PXC/PXM Products\n\nICSA-26-295-09: Siemens Industrial Edge Device Kit\n\nICSA-26-295-10: Siemens SIMATIC S7 Webserver API\n\nICSA-26-295-11: Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP\n\nICSA-26-295-12: Siemens RUGGEDCOM CROSSBOW\n\nICSA-26-295-13: Siemens WinCC\n\nICSA-26-295-14: Siemens SIMATIC S7 PLCs Web Server\n\nICSA-26-295-15: Siemens RUGGEDCOM CROSSBOW Station Access Controller\n\nICSA-26-295-16: Siemens SIMATIC S7-1500 TM MFP\n\nICSA-26-295-17: Siemens Industrial Edge Devices\n\nICSA-26-295-18: Siemens RUGGEDCOM APE1808 Devices\n\nICSMA-26-295-01: InterSystems Corporation InterSystems IRIS for Health\n\n更新：1件\n\nICSA-26-274-06: Meari IoT Cloud Platform OpenAPI Service (Update A)", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:section:想定される影響", "sourceUrl": "https://jvn.jp/vu/JVNVU98747108/", "sourcePath": "section:想定される影響", "text": "ICS Advisory / ICS Medical Advisoryを参照してください。", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:section:対策方法", "sourceUrl": "https://jvn.jp/vu/JVNVU98747108/", "sourcePath": "section:対策方法", "text": "ICS Advisory / ICS Medical Advisoryを参照してください。", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Meari IoT Cloud Platform OpenAPI Service (Update A) | CISA\n\nSummary\n\nSuccessful exploitation of these vulnerabilities could allow attackers to manipulate device configurations, trigger unauthorized behaviors, and access sensitive information such as device credentials, owner details, and network data without proper authorization.\n\nThe following versions of Meari IoT Cloud Platform OpenAPI Service (Update A) are affected:\n\nIoT Cloud Platform OpenAPI Service vers:all/* (CVE-2026-101104, CVE-2026-96613)\n\nCVSS\nVendor\nEquipment\n\nv3 7.7\nMeari\nIoT Cloud Platform OpenAPI Service\n\n1 Vulnerability\n\nMissing Authorization\n\nBackground\n\nCritical Infrastructure Sectors: Commercial Facilities, Information Technology\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: China\n\nVulnerabilities\n\nExpand All +\n\nCVE-2026-101104\n\nThe Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own. This vulnerability enables attackers to perform unauthorized actions, such as altering device settings or triggering unintended behaviors, without verifying ownership or permissions.\n\nRead More\n\n1 Affected Product\n\nMeari IoT Cloud Platform OpenAPI Service: vers:all/*\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nBoth vulnerabilities have been remediated. The required server-side fixes have been deployed to the Meari IoT Cloud Platform and are now effective for all users.\n\nMitigation\nTo ensure compatibility with these changes, all CloudEdge users are required to upgrade to the latest version of the application. Upon launching CloudEdge, users will receive a mandatory update prompt and must complete the upgrade before continuing to use the app. The latest version of CloudEdge is available on the Apple App Store and Google Play.\n\nVendor fix\nSpecifically, Meari implemented the following protections in its IoT Cloud Platform OpenAPI Service:\n\nMitigation\nCVE-2026-101104: Server-side authorization checks now verify the ownership relationship between the authenticated account and the target device before processing device configuration requests. Requests for devices that are not bound to the authenticated account are rejected.\n\nMitigation\nIoT Cloud Platform OpenAPI users are advised to contact Meari for further support https://www.meari.com/en/downLoadCenter.\n\nAdditional Metrics\n\nRelevant CWE: CWE-862 Missing Authorization\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.7\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N\n\n4.0\n6.3\nMEDIUM\nCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N\n\nView CVE Details\n\nCVE-2026-96613\n\nThe Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive information, such as device credentials, owner details, network data, and telemetry, without verifying any relationship between the requester and the target device.\n\nRead More\n\n2 Affected Products\n\nMeari IoT Cloud Platform OpenAPI Service: vers:all/*\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nBoth vulnerabilities have been remediated. The required server-side fixes have been deployed to the Meari IoT Cloud Platform and are now effective for all users.\n\nMitigation\nTo ensure compatibility with these changes, all CloudEdge users are required to upgrade to the latest version of the application. Upon launching CloudEdge, users will receive a mandatory update prompt and must complete the upgrade before continuing to use the app. The latest version of CloudEdge is available on the Apple App Store and Google Play.\n\nVendor fix\nSpecifically, Meari implemented the following protections in its IoT Cloud Platform OpenAPI Service:\n\nMitigation\nCVE-2026-96613: The same ownership verification has been applied to device shadow query interfaces. Device shadow data can now be retrieved only by accounts that are verified as being bound to the corresponding device.\n\nMitigation\nIoT Cloud Platform OpenAPI users are advised to contact Meari for further support https://www.meari.com/en/downLoadCenter.\n\nMeari IoT Cloud Platform OpenAPI Service: vers:all/*\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nBoth vulnerabilities have been remediated. The required server-side fixes have been deployed to the Meari IoT Cloud Platform and are now effective for all users.\n\nMitigation\nTo ensure compatibility with these changes, all CloudEdge users are required to upgrade to the latest version of the application. Upon launching CloudEdge, users will receive a mandatory update prompt and must complete the upgrade before continuing to use the app. The latest version of CloudEdge is available on the Apple App Store and Google Play.\n\nVendor fix\nSpecifically, Meari implemented the following protections in its IoT Cloud Platform OpenAPI Service:\n\nMitigation\nCVE-2026-96613: The same ownership verification has been applied to device shadow query interfaces. Device shadow data can now be retrieved only by accounts that are verified as being bound to the corresponding device.\n\nMitigation\nIoT Cloud Platform OpenAPI users are advised to contact Meari for further support https://www.meari.com/en/downLoadCenter.\n\nAdditional Metrics\n\nRelevant CWE: CWE-862 Missing Authorization\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n6.5\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\n\n4.0\n7.1\nHIGH\nCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N\n\nView CVE Details", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-101104", "CVE-2026-96613" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Kiloview E3 NDI Encoder | CISA\n\nSummary\n\nSuccessful exploitation of this these vulnerabilities could allow an attacker to fully compromise the device.\n\nThe following versions of Kiloview E3 NDI Encoder are affected:\n\nE3 Firmware <1.30 (CVE-2026-109122, CVE-2026-111100, CVE-2026-96616, CVE-2026-105265, CVE-2026-110491, CVE-2026-107861, CVE-2026-110243, CVE-2026-92450, CVE-2026-110825)\n\nCVSS\nVendor\nEquipment\n\nv3 9.9\nKiloview\nE3 Firmware\n\n6 Vulnerabilities\n\nImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Missing Authentication for Critical Function, Insufficient Session Expiration, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), NULL Pointer Dereference, Use of Hard-coded Credentials\n\nBackground\n\nCritical Infrastructure Sectors: Communications, Information Technology\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: China\n\nVulnerabilities\n\nExpand All +\n\nCVE-2026-109122\n\nThe network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when configuring static routes via the web management API. An authenticated web user with permission to configure static routes can exploit this to execute arbitrary operating system commands as root, and the malicious configuration persists across reboots. Successful exploitation could result in full device compromise, including exposure of stored credentials and cryptographic material.\n\nRead More\n\n1 Affected Product\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nAdditional Metrics\n\nRelevant CWE: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H\n\n4.0\n9.4\nCRITICAL\nCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\n\nView CVE Details\n\nCVE-2026-111100\n\nThe ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting vulnerable devices and preparing targeted credential attacks.\n\nRead More\n\n2 Affected Products\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nAdditional Metrics\n\nRelevant CWE: CWE-306 Missing Authentication for Critical Function\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\n\n4.0\n6.9\nMEDIUM\nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N\n\nView CVE Details\n\nCVE-2026-96616\n\nAuthentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extended period.\n\nRead More\n\n3 Affected Products\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nAdditional Metrics\n\nRelevant CWE: CWE-613 Insufficient Session Expiration\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n6.5\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N\n\n4.0\n8.3\nHIGH\nCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N\n\nView CVE Details\n\nCVE-2026-105265\n\nA vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime to point to a file outside the intended zoneinfo directory\n\nRead More\n\n4 Affected Products\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nAdditional Metrics\n\nRelevant CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N\n\n4.0\n6\nMEDIUM\nCVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N\n\nView CVE Details\n\nCVE-2026-110491\n\nThe ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues operating normally, and will recover automatically after a period. This can be triggered repeatedly by any unauthenticated party with network access to the device.\n\nRead More\n\n5 Affected Products\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nAdditional Metrics\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n4.0\n6.9\nMEDIUM\nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N\n\nView CVE Details\n\nCVE-2026-107861\n\nThe system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this function can embed characters to execute arbitrary operating system commands as root, resulting in full device compromise.\n\nRead More\n\n6 Affected Products\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nAdditional Metrics\n\nRelevant CWE: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n9.9\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\n\n4.0\n9.4\nCRITICAL\nCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\n\nView CVE Details\n\nCVE-2026-110243\n\nThe network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration endpoint before passing it to a shell command, unlike sibling handlers that perform the same validation. An authenticated web user with permission to configure network settings can exploit this to execute arbitrary operating system commands as root.\n\nRead More\n\n7 Affected Products\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nAdditional Metrics\n\nRelevant CWE: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n9.9\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\n\n4.0\n9.4\nCRITICAL\nCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\n\nView CVE Details\n\nCVE-2026-92450\n\nThe authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string within the firmware image, identical across all deployed devices. An attacker with access to the publicly distributed firmware can recover this secret and forge arbitrary session tokens, including administrative tokens, without valid credentials, enabling unauthenticated access to privileged device functions.\n\nRead More\n\n8 Affected Products\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nAdditional Metrics\n\nRelevant CWE: CWE-798 Use of Hard-coded Credentials\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n\n4.0\n8.7\nHIGH\nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N\n\nView CVE Details\n\nCVE-2026-110825\n\nThe ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this service. A remote, unauthenticated attacker can alter the device hostname, redirect DNS resolution, or modify the configured time source, enabling follow on attacks such as traffic interception or certificate validation bypass.\n\nRead More\n\n9 Affected Products\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nAdditional Metrics\n\nRelevant CWE: CWE-306 Missing Authentication for Critical Function\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\n\n4.0\n8.7\nHIGH\nCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N\n\nView CVE Details", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-109122", "CVE-2026-111100", "CVE-2026-96616", "CVE-2026-105265", "CVE-2026-110491", "CVE-2026-107861", "CVE-2026-110243", "CVE-2026-92450", "CVE-2026-110825" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens Industrial Edge App Publisher | CISA\n\nSummary\n\nThe Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to impersonate the management server and execute arbitrary code (RCE) on the local machine through Node.js integration. Siemens has released an update for the Industrial Edge App Publisher and recommends to update to the latest version.\n\nThe following versions of Siemens Industrial Edge App Publisher are affected:\n\nIndustrial Edge App Publisher vers:intdot/<1.27.9 (CVE-2026-78556, CVE-2026-78557)\n\nCVSS\nVendor\nEquipment\n\nv3 8.3\nSiemens\nIndustrial Edge App Publisher\n\n2 Vulnerabilities\n\nImproper Certificate Validation, Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nExpand All +\n\nCVE-2026-78556\n\nThe affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication (Man-in-the-Middle attack) and to spoof a trusted entity by interfering in the communication path between the client and the intended server.\n\nRead More\n\n1 Affected Product\n\nIndustrial Edge App Publisher < V1.27.9\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V1.27.9 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-295 Improper Certificate Validation\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.4\nHIGH\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N\n\nView CVE Details\n\nCVE-2026-78557\n\nThe application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for the execution of arbitrary JavaScript, which can be leveraged to achieve remote code execution (RCE) on the victim's machine\n\nRead More\n\n2 Affected Products\n\nIndustrial Edge App Publisher < V1.27.9\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V1.27.9 or later version\n\nIndustrial Edge App Publisher < V1.27.9\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V1.27.9 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n8.3\nHIGH\nCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H\n\nView CVE Details", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-78556", "CVE-2026-78557" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens Software Center | CISA\n\nSummary\n\nThe affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Siemens has released a new version for Siemens Software Center and recommends to update to the latest version. Please refer to our blog post for additional information about current known active exploitation and how to detect it.\n\nThe following versions of Siemens Software Center are affected:\n\nSiemens Software Center vers:intdot/<4.0.9.8 (CVE-2026-110936)\n\nCVSS\nVendor\nEquipment\n\nv3 6.7\nSiemens\nSiemens Software Center\n\n1 Vulnerability\n\nUncontrolled Search Path Element\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nCVE-2026-110936\n\nThe affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.\n\nRead More\n\n1 Affected Product\n\nSiemens Software Center < V4.0.9.8\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V4.0.9.8 or later version (All existing versions of SSC will be auto updated on next startup. The latest version can also be downloaded in the respective link)\n\nAdditional Metrics\n\nRelevant CWE: CWE-427 Uncontrolled Search Path Element\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n6.7\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-110936" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens Capital Embedded AR Classic | CISA\n\nSummary\n\nThe products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends updating to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.\n\nThe following versions of Siemens Capital Embedded AR Classic are affected:\n\nCapital Embedded AR Classic 431-422 vers:all/* (CVE-2026-89208)\n\nCapital Embedded AR Classic R20-11 vers:intdot/<2303 (CVE-2026-89208)\n\nCVSS\nVendor\nEquipment\n\nv3 5.3\nSiemens\nCapital Embedded AR Classic 431-422\n\n1 Vulnerability\n\nOut-of-bounds Read\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nCVE-2026-89208\n\nThe affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries.\n\nRead More\n\n2 Affected Products\n\nCapital Embedded AR Classic 431-422\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nApply network segmentation and put the ECUs behind properly configured gateways/firewalls\n\nNo fix planned\nCurrently no fix is planned\n\nCapital Embedded AR Classic R20-11 < V2303\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nApply network segmentation and put the ECUs behind properly configured gateways/firewalls\n\nVendor fix\nUpdate to V2303 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\n\nView CVE Details", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-89208" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-05", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-05", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens SENTRON 3NA COM Fuse | CISA\n\nSummary\n\nSENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition. Successful exploitation may require the affected network to be re-established to restore normal operation.\n\nThe following versions of Siemens SENTRON 3NA COM Fuse are affected:\n\nSENTRON 3NA COM Fuse vers:intdot/<5.2 (CVE-2024-7322)\n\nCVSS\nVendor\nEquipment\n\nv3 5.8\nSiemens\nSENTRON 3NA COM Fuse\n\n1 Vulnerability\n\nImproper Verification of Source of a Communication Channel\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nCVE-2024-7322\n\nA ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established\n\nRead More\n\n1 Affected Product\n\nSENTRON 3NA COM Fuse < V5.2\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V5.2 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-940 Improper Verification of Source of a Communication Channel\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n5.8\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H\n\nView CVE Details", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2024-7322" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens PSS(R)SINCAL | CISA\n\nSummary\n\nPSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to use the legacy WibuKey dongle license type. Siemens is actively preparing updates and recommends applicable mitigations for products where patches are currently unavailable.\n\nThe following versions of Siemens PSS(R)SINCAL are affected:\n\nPSS(R)SINCAL V21.5 vers:all/* (CVE-2026-84854)\n\nPSS(R)SINCAL V22.0 vers:all/* (CVE-2026-84854)\n\nPSS(R)SINCAL V22.5 vers:intdot/<22.5.5 (CVE-2026-84854)\n\nCVSS\nVendor\nEquipment\n\nv3 7\nSiemens\nPSS(R)SINCAL V21.5\n\n1 Vulnerability\n\nOut-of-bounds Write\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nCVE-2026-84854\n\nIn the WibuKey driver, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.\n\nRead More\n\n3 Affected Products\n\nPSS(R)SINCAL V21.5\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nInstall WIBU Systems WibuKey Runtime for Windows 6.72 or later version manually to fix the issue: Download the package from User Software - Wibu-Systems and follow the installation instructions from WIBU Systems.\n\nNone available\nCurrently no fix is available\n\nPSS(R)SINCAL V22.0\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nInstall WIBU Systems WibuKey Runtime for Windows 6.72 or later version manually to fix the issue: Download the package from User Software - Wibu-Systems and follow the installation instructions from WIBU Systems.\n\nNone available\nCurrently no fix is available\n\nPSS(R)SINCAL V22.5 < V22.5 Update 5\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V22.5 Update 5 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-84854" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-07", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-07", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens SIMATIC IPCs | CISA\n\nSummary\n\nThe products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new versions for the affected products and recommends to update to the latest versions.\n\nThe following versions of Siemens SIMATIC IPCs are affected:\n\nSIMATIC IPC BX-21A vers:intdot/<31.01.13 (CVE-2026-72895)\n\nSIMATIC IPC RW-543A vers:intdot/<1.1.4 (CVE-2026-72895)\n\nSIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G vers:intdot/<28.01.15 (CVE-2026-72895)\n\nCVSS\nVendor\nEquipment\n\nv3 7.7\nSiemens\nSIMATIC IPC BX-21A\n\n1 Vulnerability\n\nUse of Default Cryptographic Key\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nCVE-2026-72895\n\nA BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a local attacker with physical or administrative access to the device to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled, potentially leading to a full loss of confidentiality, integrity, and availability of the device.\n\nRead More\n\n3 Affected Products\n\nSIMATIC IPC BX-21A < V31.01.13\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\n\nNote: After upgrading to the fixed BIOS version, users must load the BIOS default settings. If Secure Boot keys were already provisioned, they must be provisioned again afterwards.\n\nMitigation\nAs a temporary mitigation, users can manually remove the test key from the database (e.g., \"DO NOT TRUST - AMI Test PK\" for RW-543A or \"insyde-ElkhartLake\" for IPC227G/277G/327G/377G and BX-21A). Note: Loading default settings will restore the test key, so upgrading remains recommended.\n\nVendor fix\nUpdate to V31.01.13 or later version\n\nSIMATIC IPC RW-543A < V1.1.4\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\n\nNote: After upgrading to the fixed BIOS version, users must load the BIOS default settings. If Secure Boot keys were already provisioned, they must be provisioned again afterwards.\n\nMitigation\nAs a temporary mitigation, users can manually remove the test key from the database (e.g., \"DO NOT TRUST - AMI Test PK\" for RW-543A or \"insyde-ElkhartLake\" for IPC227G/277G/327G/377G and BX-21A). Note: Loading default settings will restore the test key, so upgrading remains recommended.\n\nVendor fix\nUpdate to V1.1.4 or later version\n\nSIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G < V28.01.15\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\n\nNote: After upgrading to the fixed BIOS version, users must load the BIOS default settings. If Secure Boot keys were already provisioned, they must be provisioned again afterwards.\n\nMitigation\nAs a temporary mitigation, users can manually remove the test key from the database (e.g., \"DO NOT TRUST - AMI Test PK\" for RW-543A or \"insyde-ElkhartLake\" for IPC227G/277G/327G/377G and BX-21A). Note: Loading default settings will restore the test key, so upgrading remains recommended.\n\nVendor fix\nUpdate to V28.01.15 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-1394 Use of Default Cryptographic Key\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H\n\nView CVE Details", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-72895" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens APOGEE, TALON and Desigo PXC/PXM Products | CISA\n\nSummary\n\nThe products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens APOGEE, TALON and Desigo PXC/PXM Products are affected:\n\nAPOGEE MBC (PPC) (BACnet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE MBC (PPC) (P2 Ethernet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE MEC (PPC) (BACnet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE MEC (PPC) (P2 Ethernet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE PXC Compact (BACnet) vers:intdot/<3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE PXC Compact (P2 Ethernet) vers:intdot/<2.8.21 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE PXC Modular (BACnet) vers:intdot/<3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE PXC Modular (P2 Ethernet) vers:intdot/<2.8.21 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nDesigo PXC00-E.D vers:intdot/>=2.3 (CVE-2026-89208)\n\nDesigo PXC00-U vers:intdot/>=2.3 (CVE-2026-89208)\n\nDesigo PXC001-E.D vers:intdot/>=2.3 (CVE-2026-89208)\n\nDesigo PXC100-E.D vers:intdot/>=2.3 (CVE-2026-89208)\n\nDesigo PXC12-E.D vers:intdot/>=2.3 (CVE-2026-89208)\n\nDesigo PXC128-U vers:intdot/>=2.3 (CVE-2026-89208)\n\nDesigo PXC200-E.D vers:intdot/>=2.3 (CVE-2026-89208)\n\nDesigo PXC22-E.D vers:intdot/>=2.3 (CVE-2026-89208)\n\nDesigo PXC22.1-E.D vers:intdot/>=2.3 (CVE-2026-89208)\n\nDesigo PXC36.1-E.D vers:intdot/>=2.3 (CVE-2026-89208)\n\nDesigo PXC50-E.D vers:intdot/>=2.3 (CVE-2026-89208)\n\nDesigo PXC64-U vers:intdot/>=2.3 (CVE-2026-89208)\n\nDesigo PXM20-E vers:intdot/>=2.3 (CVE-2026-89208)\n\nTALON TC Compact (BACnet) vers:intdot/<3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nTALON TC Modular (BACnet) vers:intdot/<3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nCVSS\nVendor\nEquipment\n\nv3 8.2\nSiemens\nAPOGEE MBC (PPC) (BACnet)\n\n3 Vulnerabilities\n\nOut-of-bounds Read, Integer Underflow (Wrap or Wraparound), Stack-based Buffer Overflow\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nExpand All +\n\nCVE-2026-89208\n\nThe affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries.\n\nRead More\n\n13 Affected Products\n\nDesigo PXC00-U >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC001-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC100-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC12-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC128-U >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC200-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC22-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC22.1-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC36.1-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC50-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC64-U >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXM20-E >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC00-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nAdditional Metrics\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\n\nView CVE Details\n\nCVE-2026-102073\n\nThe affected product web service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to read portions of device memory or to cause a denial-of-service condition.\n\nRead More\n\n23 Affected Products\n\nDesigo PXC00-U >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC001-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC100-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC12-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC128-U >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC200-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC22-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC22.1-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC36.1-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC50-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC64-U >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXM20-E >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC00-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nAPOGEE MBC (PPC) (BACnet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nNo fix planned\nCurrently no fix is planned\n\nAPOGEE MBC (PPC) (P2 Ethernet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nNo fix planned\nCurrently no fix is planned\n\nTALON TC Compact (BACnet) < V3.5.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V3.5.7 or later version\n\nTALON TC Modular (BACnet) < V3.5.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V3.5.7 or later version\n\nAPOGEE MEC (PPC) (BACnet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nNo fix planned\nCurrently no fix is planned\n\nAPOGEE MEC (PPC) (P2 Ethernet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nNo fix planned\nCurrently no fix is planned\n\nAPOGEE PXC Compact (BACnet) < V3.5.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V3.5.7 or later version\n\nAPOGEE PXC Compact (P2 Ethernet) < V2.8.21\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V2.8.21 or later version\n\nAPOGEE PXC Modular (BACnet) < V3.5.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V3.5.7 or later version\n\nAPOGEE PXC Modular (P2 Ethernet) < V2.8.21\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V2.8.21 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n8.2\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L\n\nView CVE Details\n\nCVE-2026-102074\n\nThe affected product FTP service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to cause a denial of service.\n\nRead More\n\n33 Affected Products\n\nDesigo PXC00-U >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC001-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC100-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC12-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC128-U >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC200-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC22-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC22.1-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC36.1-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC50-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC64-U >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXM20-E >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC00-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nAPOGEE MBC (PPC) (BACnet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nNo fix planned\nCurrently no fix is planned\n\nAPOGEE MBC (PPC) (P2 Ethernet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nNo fix planned\nCurrently no fix is planned\n\nTALON TC Compact (BACnet) < V3.5.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V3.5.7 or later version\n\nTALON TC Modular (BACnet) < V3.5.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V3.5.7 or later version\n\nAPOGEE MEC (PPC) (BACnet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nNo fix planned\nCurrently no fix is planned\n\nAPOGEE MEC (PPC) (P2 Ethernet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nNo fix planned\nCurrently no fix is planned\n\nAPOGEE PXC Compact (BACnet) < V3.5.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V3.5.7 or later version\n\nAPOGEE PXC Compact (P2 Ethernet) < V2.8.21\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V2.8.21 or later version\n\nAPOGEE PXC Modular (BACnet) < V3.5.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V3.5.7 or later version\n\nAPOGEE PXC Modular (P2 Ethernet) < V2.8.21\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V2.8.21 or later version\n\nAPOGEE MBC (PPC) (BACnet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nNo fix planned\nCurrently no fix is planned\n\nAPOGEE MBC (PPC) (P2 Ethernet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nNo fix planned\nCurrently no fix is planned\n\nTALON TC Compact (BACnet) < V3.5.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V3.5.7 or later version\n\nTALON TC Modular (BACnet) < V3.5.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V3.5.7 or later version\n\nAPOGEE MEC (PPC) (BACnet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nNo fix planned\nCurrently no fix is planned\n\nAPOGEE MEC (PPC) (P2 Ethernet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nNo fix planned\nCurrently no fix is planned\n\nAPOGEE PXC Compact (BACnet) < V3.5.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V3.5.7 or later version\n\nAPOGEE PXC Compact (P2 Ethernet) < V2.8.21\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V2.8.21 or later version\n\nAPOGEE PXC Modular (BACnet) < V3.5.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V3.5.7 or later version\n\nAPOGEE PXC Modular (P2 Ethernet) < V2.8.21\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V2.8.21 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-121 Stack-based Buffer Overflow\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\nView CVE Details\n\nCVE-2026-102075\n\nThe affected product web service does not properly validate user input in multipart handling. This could allow an unauthenticated remote attacker to cause a denial of service.\n\nRead More\n\n43 Affected Products\n\nDesigo PXC00-U >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC001-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC100-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC12-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC128-U >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC200-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC22-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC22.1-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC36.1-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC50-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC64-U >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXM20-E >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nDesigo PXC00-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nAPOGEE MBC (PPC) (BACnet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nNo fix planned\nCurrently no fix is planned\n\nAPOGEE MBC (PPC) (P2 Ethernet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nNo fix planned\nCurrently no fix is planned\n\nTALON TC Compact (BACnet) < V3.5.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V3.5.7 or later version\n\nTALON TC Modular (BACnet) < V3.5.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nVendor fix\nUpdate to V3.5.7 or later version\n\nAPOGEE MEC (PPC) (BACnet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nMitigation\nDisable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)\n\nNo fix planned\nCurrently no fix is planned\n\nAPOGEE MEC (PPC) (P2 Ethernet)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigat", "truncated": true, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-102073", "CVE-2026-102074", "CVE-2026-102075", "CVE-2026-102076", "CVE-2026-89208" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens Industrial Edge Device Kit | CISA\n\nSummary\n\nUsers of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.\n\nThe following versions of Siemens Industrial Edge Device Kit are affected:\n\nIndustrial Edge Device Kit - arm64 V1.10 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.11 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.12 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.13 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.14 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.15 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.16 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.17 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.18 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.19 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.20 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.21 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.22 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.23 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.24 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.25 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.26 vers:intdot/<1.26.2.1 (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.27 vers:intdot/<1.27.1.1 (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.28 vers:intdot/<1.28.0.6 (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.5 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.6 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.7 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.8 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.9 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.10 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.11 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.12 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.13 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.14 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.15 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.16 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.17 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.18 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.19 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.20 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.21 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.22 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.23 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.24 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.25 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.26 vers:intdot/<1.26.2.1 (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.27 vers:intdot/<1.27.1.1 (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.28 vers:intdot/<1.28.0.6 (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.5 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.6 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.7 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.8 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - x86-64 V1.9 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nCVSS\nVendor\nEquipment\n\nv3 9.1\nSiemens\nIndustrial Edge Device Kit - arm64 V1.10\n\n1 Vulnerability\n\nPath Traversal: '.../...//'\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nExpand All +\n\nCVE-2026-44414\n\nAffected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system.\n\nRead More\n\n48 Affected Products\n\nIndustrial Edge Device Kit - arm64 V1.10\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.19\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.20\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.21\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.22\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.23\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.24\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.25\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.26 < V1.26.2-1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.26.2-1 or later version\n\nIndustrial Edge Device Kit - arm64 V1.27 < V1.27.1-1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.27.1-1 or later version\n\nIndustrial Edge Device Kit - arm64 V1.28 < V1.28.0-6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.0-6 or later version\n\nIndustrial Edge Device Kit - arm64 V1.11\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.5\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.8\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.9\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.10\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.11\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.12\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.13\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.14\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.12\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.15\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.16\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.17\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.18\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.19\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.20\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.21\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.22\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.23\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.24\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.13\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.25\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.26 < V1.26.2-1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.26.2-1 or later version\n\nIndustrial Edge Device Kit - x86-64 V1.27 < V1.27.1-1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.27.1-1 or later version\n\nIndustrial Edge Device Kit - x86-64 V1.28 < V1.28.0-6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.0-6 or later version\n\nIndustrial Edge Device Kit - x86-64 V1.5\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.8\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.9\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.14\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.15\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.16\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.17\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.18\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nAdditional Metrics\n\nRelevant CWE: CWE-35 Path Traversal: '.../...//'\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n6.8\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N\n\nView CVE Details\n\nCVE-2026-44415\n\nAffected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.\n\nRead More\n\n96 Affected Products\n\nIndustrial Edge Device Kit - arm64 V1.10\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.19\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.20\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.21\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.22\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.23\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.24\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.25\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.26 < V1.26.2-1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.26.2-1 or later version\n\nIndustrial Edge Device Kit - arm64 V1.27 < V1.27.1-1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.27.1-1 or later version\n\nIndustrial Edge Device Kit - arm64 V1.28 < V1.28.0-6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.0-6 or later version\n\nIndustrial Edge Device Kit - arm64 V1.11\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.5\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.8\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.9\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.10\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.11\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.12\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.13\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.14\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.12\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.15\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.16\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.17\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.18\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.19\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.20\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.21\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.22\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - x86-64 V1.23\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsur", "truncated": true, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-44414", "CVE-2026-44415" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens SIMATIC S7 Webserver API | CISA\n\nSummary\n\n.NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory. Siemens has released a new version for .NET Client Library for SIMATIC S7 Webserver API and recommends to update to the latest version.\n\nThe following versions of Siemens SIMATIC S7 Webserver API are affected:\n\n.NET Client Library for SIMATIC S7 Webserver API vers:intdot/<3.3.61, vers:intdot/<3.3.62 (CVE-2026-85114, CVE-2026-85115)\n\nCVSS\nVendor\nEquipment\n\nv3 7.5\nSiemens\n.NET Client Library for SIMATIC S7 Webserver API\n\n2 Vulnerabilities\n\nImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Generation of Error Message Containing Sensitive Information\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nExpand All +\n\nCVE-2026-85114\n\nAffected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.\n\nRead More\n\n1 Affected Product\n\n.NET Client Library for SIMATIC S7 Webserver API < V3.3.61\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V3.3.61 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\n\nView CVE Details\n\nCVE-2026-85115\n\nAffected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtain the plaintext restore password and potentially perform unauthorized operations on the PLC.\n\nRead More\n\n2 Affected Products\n\n.NET Client Library for SIMATIC S7 Webserver API < V3.3.61\n\nProduct Status: known_affected\n\nRemediations\n\n.NET Client Library for SIMATIC S7 Webserver API < V3.3.62\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V3.3.62 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-209 Generation of Error Message Containing Sensitive Information\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\n\nView CVE Details", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-85114", "CVE-2026-85115" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP | CISA\n\nSummary\n\nMultiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP are affected:\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) vers:intdot/>=3.1.7\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) vers:intdot/>=3.1.7\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) vers:intdot/>=3.1.7\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) vers:intdot/>=3.1.7\n\nSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) vers:intdot/>=3.1.7\n\nCVSS\nVendor\nEquipment\n\nv3 10\nSiemens\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)\n\n428 Vulnerabilities\n\nAccess of Resource Using Incompatible Type ('Type Confusion'), Access of Uninitialized Pointer, Active Debug Code, Buffer Access with Incorrect Length Value, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Buffer Underwrite ('Buffer Underflow'), Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'), Deadlock, Divide By Zero, Expired Pointer Dereference, Exposure of Sensitive Information Due to Incompatible Policies, Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution, Improper Enforcement of Behavioral Workflow, Improper Following of Specification by Caller, Improper Handling of Invalid Use of Special Elements, Improper Handling of Length Parameter Inconsistency, Improper Handling of Missing Special Element, Improper Handling of Structural Elements, Improper Input Validation, Improper Locking, Improper Neutralization of Null Byte or NUL Character, Improper Null Termination, Improper Privilege Management, Improper Resource Locking, Improper Resource Shutdown or Release, Improper Update of Reference Count, Improper Validation of Specified Index, Position, or Offset in Input, Improper Validation of Specified Quantity in Input, Improper Validation of Specified Type of Input, Improperly Implemented Security Check for Standard, Incomplete Cleanup, Incomplete Internal State Distinction, Incorrect Calculation of Buffer Size, Incorrect Conversion between Numeric Types, Incorrect Privilege Assignment, Incorrect Synchronization, Incorrect Type Conversion or Cast, Integer Overflow or Wraparound, Loop with Unreachable Exit Condition ('Infinite Loop'), Memory Allocation with Excessive Size Value, Misinterpretation of Input, Missing Critical Step in Authentication, Missing Default Case in Multiple Condition Expression, Missing Encryption of Sensitive Data, Missing Initialization of Resource, Missing Release of Memory after Effective Lifetime, Missing Release of Resource after Effective Lifetime, Missing Report of Error Condition, Missing Synchronization, Multiple Releases of Same Resource or Handle, NULL Pointer Dereference, Operation on a Resource after Expiration or Release, Out-of-bounds Read, Out-of-bounds Write, Plaintext Storage of a Password, Race Condition within a Thread, Reachable Assertion, Release of Invalid Pointer or Reference, Signal Handler Race Condition, Time-of-check Time-of-use (TOCTOU) Race Condition, Transmission of Private Resources into a New Sphere ('Resource Leak'), Trust of System Event Data, Unchecked Return Value, Uncontrolled Recursion, Untrusted Pointer Dereference, Use After Free, Use of Externally-Controlled Format String, Use of Uninitialized Resource, Use of Uninitialized Variable, Write-what-where Condition\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nCVE-2021-41617\n\nsshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.\n\nRead More\n\n5 Affected Products\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) >= V3.1.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.\n\nMitigation\nOnly build and run applications from trusted sources.\n\nNone available\nCurrently no fix is available\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) >= V3.1.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.\n\nMitigation\nOnly build and run applications from trusted sources.\n\nNone available\nCurrently no fix is available\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) >= V3.1.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.\n\nMitigation\nOnly build and run applications from trusted sources.\n\nNone available\nCurrently no fix is available\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) >= V3.1.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.\n\nMitigation\nOnly build and run applications from trusted sources.\n\nNone available\nCurrently no fix is available\n\nSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) >= V3.1.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.\n\nMitigation\nOnly build and run applications from trusted sources.\n\nNone available\nCurrently no fix is available\n\nAdditional Metrics\n\nRelevant CWE: CWE-311 Missing Encryption of Sensitive Data\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details\n\nCVE-2021-41617\n\nCVE-2023-28531\n\nCVE-2023-51384\n\nCVE-2023-52927\n\nCVE-2023-53292\n\nCVE-2024-26783\n\nCVE-2024-27056\n\nCVE-2024-28956\n\nCVE-2024-36903\n\nCVE-2024-36927\n\nCVE-2024-42079\n\nCVE-2024-46786\n\nCVE-2024-47736\n\nCVE-2024-47809\n\nCVE-2024-49968\n\nCVE-2024-49994\n\nCVE-2024-49998\n\nCVE-2024-50014\n\nCVE-2024-50063\n\nCVE-2024-50164\n\nCVE-2024-50298\n\nCVE-2024-53124\n\nCVE-2024-53170\n\nCVE-2024-54458\n\nCVE-2024-56631\n\nCVE-2024-56703\n\nCVE-2024-56719\n\nCVE-2024-57917\n\nCVE-2024-57924\n\nCVE-2024-57973\n\nCVE-2024-57977\n\nCVE-2024-57979\n\nCVE-2024-58011\n\nCVE-2024-58016\n\nCVE-2024-58020\n\nCVE-2024-58056\n\nCVE-2024-58058\n\nCVE-2024-58061\n\nCVE-2024-58086\n\nCVE-2025-21645\n\nCVE-2025-21648\n\nCVE-2025-21655\n\nCVE-2025-21676\n\nCVE-2025-21682\n\nCVE-2025-21702\n\nCVE-2025-21705\n\nCVE-2025-21706\n\nCVE-2025-21707\n\nCVE-2025-21718\n\nCVE-2025-21731\n\nCVE-2025-21745\n\nCVE-2025-21758\n\nCVE-2025-21760\n\nCVE-2025-21764\n\nCVE-2025-21765\n\nCVE-2025-21780\n\nCVE-2025-21795\n\nCVE-2025-21796\n\nCVE-2025-21802\n\nCVE-2025-21814\n\nCVE-2025-21846\n\nCVE-2025-21853\n\nCVE-2025-21861\n\nCVE-2025-21863\n\nCVE-2025-21864\n\nCVE-2025-21867\n\nCVE-2025-21875\n\nCVE-2025-21887\n\nCVE-2025-21913\n\nCVE-2025-21919\n\nCVE-2025-21925\n\nCVE-2025-21926\n\nCVE-2025-21938\n\nCVE-2025-21959\n\nCVE-2025-21999\n\nCVE-2025-22005\n\nCVE-2025-22015\n\nCVE-2025-22055\n\nCVE-2025-22056\n\nCVE-2025-22060\n\nCVE-2025-22083\n\nCVE-2025-22090\n\nCVE-2025-22095\n\nCVE-2025-22107\n\nCVE-2025-22111\n\nCVE-2025-22121\n\nCVE-2025-23136\n\nCVE-2025-23143\n\nCVE-2025-37785\n\nCVE-2025-37909\n\nCVE-2025-37917\n\nCVE-2025-37945\n\nCVE-2025-37959\n\nCVE-2025-37964\n\nCVE-2025-37972\n\nCVE-2025-37980\n\nCVE-2025-38125\n\nCVE-2025-38162\n\nCVE-2025-38192\n\nCVE-2025-38201\n\nCVE-2025-38232\n\nCVE-2025-38322\n\nCVE-2025-38591\n\nCVE-2025-38614\n\nCVE-2025-38681\n\nCVE-2025-38704\n\nCVE-2025-38721\n\nCVE-2025-38725\n\nCVE-2025-38727\n\nCVE-2025-38732\n\nCVE-2025-38736\n\nCVE-2025-39681\n\nCVE-2025-39691\n\nCVE-2025-39721\n\nCVE-2025-39748\n\nCVE-2025-39756\n\nCVE-2025-39764\n\nCVE-2025-39770\n\nCVE-2025-39773\n\nCVE-2025-39782\n\nCVE-2025-39795\n\nCVE-2025-39826\n\nCVE-2025-39827\n\nCVE-2025-39845\n\nCVE-2025-39866\n\nCVE-2025-39871\n\nCVE-2025-39931\n\nCVE-2025-39953\n\nCVE-2025-39955\n\nCVE-2025-39964\n\nCVE-2025-39977\n\nCVE-2025-39978\n\nCVE-2025-39980\n\nCVE-2025-40022\n\nCVE-2025-40070\n\nCVE-2025-40078\n\nCVE-2025-40080\n\nCVE-2025-40105\n\nCVE-2025-40135\n\nCVE-2025-40149\n\nCVE-2025-40196\n\nCVE-2025-40219\n\nCVE-2025-40261\n\nCVE-2025-40300\n\nCVE-2025-61984\n\nCVE-2025-61985\n\nCVE-2025-68206\n\nCVE-2025-68261\n\nCVE-2025-68264\n\nCVE-2025-68265\n\nCVE-2025-68266\n\nCVE-2025-68291\n\nCVE-2025-68337\n\nCVE-2025-68349\n\nCVE-2025-68363\n\nCVE-2025-68371\n\nCVE-2025-68724\n\nCVE-2025-68725\n\nCVE-2025-68742\n\nCVE-2025-68764\n\nCVE-2025-68773\n\nCVE-2025-68776\n\nCVE-2025-68782\n\nCVE-2025-68787\n\nCVE-2025-68788\n\nCVE-2025-68798\n\nCVE-2025-68803\n\nCVE-2025-68814\n\nCVE-2025-68816\n\nCVE-2025-68818\n\nCVE-2025-68820\n\nCVE-2025-71064\n\nCVE-2025-71075\n\nCVE-2025-71079\n\nCVE-2025-71085\n\nCVE-2025-71086\n\nCVE-2025-71088\n\nCVE-2025-71095\n\nCVE-2025-71097\n\nCVE-2025-71098\n\nCVE-2025-71104\n\nCVE-2025-71112\n\nCVE-2025-71113\n\nCVE-2025-71114\n\nCVE-2025-71120\n\nCVE-2025-71123\n\nCVE-2025-71131\n\nCVE-2025-71161\n\nCVE-2025-71162\n\nCVE-2025-71163\n\nCVE-2025-71185\n\nCVE-2025-71186\n\nCVE-2025-71189\n\nCVE-2025-71190\n\nCVE-2025-71191\n\nCVE-2025-71197\n\nCVE-2025-71221\n\nCVE-2025-71265\n\nCVE-2025-71266\n\nCVE-2025-71267\n\nCVE-2026-3497\n\nCVE-2026-22977\n\nCVE-2026-22979\n\nCVE-2026-22980\n\nCVE-2026-22982\n\nCVE-2026-22992\n\nCVE-2026-22994\n\nCVE-2026-23003\n\nCVE-2026-23005\n\nCVE-2026-23010\n\nCVE-2026-23011\n\nCVE-2026-23019\n\nCVE-2026-23026\n\nCVE-2026-23038\n\nCVE-2026-23054\n\nCVE-2026-23060\n\nCVE-2026-23083\n\nCVE-2026-23084\n\nCVE-2026-23086\n\nCVE-2026-23087\n\nCVE-2026-23095\n\nCVE-2026-23100\n\nCVE-2026-23103\n\nCVE-2026-23110\n\nCVE-2026-23111\n\nCVE-2026-23113\n\nCVE-2026-23154\n\nCVE-2026-23204\n\nCVE-2026-23231\n\nCVE-2026-23242\n\nCVE-2026-23243\n\nCVE-2026-23245\n\nCVE-2026-23255\n\nCVE-2026-23270\n\nCVE-2026-23271\n\nCVE-2026-23273\n\nCVE-2026-23274\n\nCVE-2026-23277\n\nCVE-2026-23284\n\nCVE-2026-23287\n\nCVE-2026-23290\n\nCVE-2026-23293\n\nCVE-2026-23300\n\nCVE-2026-23304\n\nCVE-2026-23319\n\nCVE-2026-23321\n\nCVE-2026-23335\n\nCVE-2026-23340\n\nCVE-2026-23343\n\nCVE-2026-23351\n\nCVE-2026-23359\n\nCVE-2026-23365\n\nCVE-2026-23368\n\nCVE-2026-23370\n\nCVE-2026-23378\n\nCVE-2026-23379\n\nCVE-2026-23381\n\nCVE-2026-23391\n\nCVE-2026-23392\n\nCVE-2026-23397\n\nCVE-2026-23398\n\nCVE-2026-23399\n\nCVE-2026-23414\n\nCVE-2026-23422\n\nCVE-2026-23434\n\nCVE-2026-23438\n\nCVE-2026-23439\n\nCVE-2026-23446\n\nCVE-2026-23449\n\nCVE-2026-23450\n\nCVE-2026-23452\n\nCVE-2026-23454\n\nCVE-2026-23455\n\nCVE-2026-23456\n\nCVE-2026-23457\n\nCVE-2026-23458\n\nCVE-2026-23463\n\nCVE-2026-23474\n\nCVE-2026-23475\n\nCVE-2026-27135\n\nCVE-2026-31389\n\nCVE-2026-31391\n\nCVE-2026-31396\n\nCVE-2026-31402\n\nCVE-2026-31403\n\nCVE-2026-31411\n\nCVE-2026-31414\n\nCVE-2026-31415\n\nCVE-2026-31416\n\nCVE-2026-31417\n\nCVE-2026-31418\n\nCVE-2026-31421\n\nCVE-2026-31422\n\nCVE-2026-31423\n\nCVE-2026-31424\n\nCVE-2026-31427\n\nCVE-2026-31428\n\nCVE-2026-31441\n\nCVE-2026-31446\n\nCVE-2026-31447\n\nCVE-2026-31448\n\nCVE-2026-31449\n\nCVE-2026-31450\n\nCVE-2026-31452\n\nCVE-2026-31466\n\nCVE-2026-31469\n\nCVE-2026-31485\n\nCVE-2026-31494\n\nCVE-2026-31495\n\nCVE-2026-31496\n\nCVE-2026-31503\n\nCVE-2026-31504\n\nCVE-2026-31507\n\nCVE-2026-31508\n\nCVE-2026-31515\n\nCVE-2026-31518\n\nCVE-2026-31521\n\nCVE-2026-31533\n\nCVE-2026-31546\n\nCVE-2026-31555\n\nCVE-2026-31563\n\nCVE-2026-31565\n\nCVE-2026-31628\n\nCVE-2026-31634\n\nCVE-2026-31649\n\nCVE-2026-31651\n\nCVE-2026-31658\n\nCVE-2026-31664\n\nCVE-2026-31665\n\nCVE-2026-31669\n\nCVE-2026-31670\n\nCVE-2026-31671\n\nCVE-2026-31674\n\nCVE-2026-31680\n\nCVE-2026-31681\n\nCVE-2026-31682\n\nCVE-2026-31700\n\nCVE-2026-31737\n\nCVE-2026-31752\n\nCVE-2026-31761\n\nCVE-2026-31768\n\nCVE-2026-40355\n\nCVE-2026-41989\n\nCVE-2026-43011\n\nCVE-2026-43024\n\nCVE-2026-43025\n\nCVE-2026-43026\n\nCVE-2026-43027\n\nCVE-2026-43028\n\nCVE-2026-43030\n\nCVE-2026-43033\n\nCVE-2026-43035\n\nCVE-2026-43038\n\nCVE-2026-43040\n\nCVE-2026-43057\n\nCVE-2026-43071\n\nCVE-2026-43085\n\nCVE-2026-43089\n\nCVE-2026-43116\n\nCVE-2026-43216\n\nCVE-2026-43303\n\nCVE-2026-43492\n\nCVE-2026-43499\n\nCVE-2026-43501\n\nCVE-2026-45841\n\nCVE-2026-46015\n\nCVE-2026-46021\n\nCVE-2026-46033\n\nCVE-2026-46037\n\nCVE-2026-46040\n\nCVE-2026-46046\n\nCVE-2026-46086\n\nCVE-2026-46101\n\nCVE-2026-46116\n\nCVE-2026-46132\n\nCVE-2026-46172\n\nCVE-2026-46173\n\nCVE-2026-46174\n\nCVE-2026-46193\n\nCVE-2026-46303\n\nCVE-2026-46306\n\nCVE-2026-46323\n\nCVE-2026-46333\n\nCVE-2026-52910\n\nCVE-2026-52912\n\nCVE-2026-52930\n\nCVE-2026-52933\n\nCVE-2026-52942\n\nCVE-2026-52943\n\nCVE-2026-52946\n\nCVE-2026-52970\n\nCVE-2026-52986\n\nCVE-2026-52998\n\nCVE-2026-52999\n\nCVE-2026-53001\n\nCVE-2026-53002\n\nCVE-2026-53006\n\nCVE-2026-53012\n\nCVE-2026-53050\n\nCVE-2026-53134\n\nCVE-2026-53218\n\nCVE-2026-53219\n\nCVE-2026-53223\n\nCVE-2026-53236\n\nCVE-2026-53239\n\nCVE-2026-53249\n\nCVE-2026-53268\n\nCVE-2026-53269\n\nCVE-2026-53275\n\nCVE-2026-53295\n\nCVE-2026-53352\n\nCVE-2026-53400\n\nCVE-2026-63810\n\nCVE-2026-64279\n\nCVE-2026-64317\n\nCVE-2026-64370\n\nCVE-2026-64371\n\nCVE-2026-64375\n\nCVE-2026-64411\n\nCVE-2026-64412\n\nCVE-2026-64413\n\nCVE-2026-64422\n\nCVE-2026-64423\n\nCVE-2026-64425\n\nCVE-2026-64538\n\nCVE-2026-64545\n\nCVE-2026-64552\n\nCVE-2026-64560", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2021-41617", "CVE-2023-28531", "CVE-2023-51384", "CVE-2023-52927", "CVE-2023-53292", "CVE-2024-26783", "CVE-2024-27056", "CVE-2024-28956", "CVE-2024-36903", "CVE-2024-36927", "CVE-2024-42079", "CVE-2024-46786", "CVE-2024-47736", "CVE-2024-47809", "CVE-2024-49968", "CVE-2024-49994", "CVE-2024-49998", "CVE-2024-50014", "CVE-2024-50063", "CVE-2024-50164", "CVE-2024-50298", "CVE-2024-53124", "CVE-2024-53170", "CVE-2024-54458", "CVE-2024-56631", "CVE-2024-56703", "CVE-2024-56719", "CVE-2024-57917", "CVE-2024-57924", "CVE-2024-57973", "CVE-2024-57977", "CVE-2024-57979", "CVE-2024-58011", "CVE-2024-58016", "CVE-2024-58020", "CVE-2024-58056", "CVE-2024-58058", "CVE-2024-58061", "CVE-2024-58086", "CVE-2025-21645", "CVE-2025-21648", "CVE-2025-21655", "CVE-2025-21676", "CVE-2025-21682", "CVE-2025-21702", "CVE-2025-21705", "CVE-2025-21706", "CVE-2025-21707", "CVE-2025-21718", "CVE-2025-21731", "CVE-2025-21745", "CVE-2025-21758", "CVE-2025-21760", "CVE-2025-21764", "CVE-2025-21765", "CVE-2025-21780", "CVE-2025-21795", "CVE-2025-21796", "CVE-2025-21802", "CVE-2025-21814", "CVE-2025-21846", "CVE-2025-21853", "CVE-2025-21861", "CVE-2025-21863", "CVE-2025-21864", "CVE-2025-21867", "CVE-2025-21875", "CVE-2025-21887", "CVE-2025-21913", "CVE-2025-21919", "CVE-2025-21925", "CVE-2025-21926", "CVE-2025-21938", "CVE-2025-21959", "CVE-2025-21999", "CVE-2025-22005", "CVE-2025-22015", "CVE-2025-22055", "CVE-2025-22056", "CVE-2025-22060", "CVE-2025-22083", "CVE-2025-22090", "CVE-2025-22095", "CVE-2025-22107", "CVE-2025-22111", "CVE-2025-22121", "CVE-2025-23136", "CVE-2025-23143", "CVE-2025-37785", "CVE-2025-37909", "CVE-2025-37917", "CVE-2025-37945", "CVE-2025-37959", "CVE-2025-37964", "CVE-2025-37972", "CVE-2025-37980", "CVE-2025-38125", "CVE-2025-38162", "CVE-2025-38192", "CVE-2025-38201", "CVE-2025-38232", "CVE-2025-38322", "CVE-2025-38591", "CVE-2025-38614", "CVE-2025-38681", "CVE-2025-38704", "CVE-2025-38721", "CVE-2025-38725", "CVE-2025-38727", "CVE-2025-38732", "CVE-2025-38736", "CVE-2025-39681", "CVE-2025-39691", "CVE-2025-39721", "CVE-2025-39748", "CVE-2025-39756", "CVE-2025-39764", "CVE-2025-39770", "CVE-2025-39773", "CVE-2025-39782", "CVE-2025-39795", "CVE-2025-39826", "CVE-2025-39827", "CVE-2025-39845", "CVE-2025-39866", "CVE-2025-39871", "CVE-2025-39931", "CVE-2025-39953", "CVE-2025-39955", "CVE-2025-39964", "CVE-2025-39977", "CVE-2025-39978", "CVE-2025-39980", "CVE-2025-40022", "CVE-2025-40070", "CVE-2025-40078", "CVE-2025-40080", "CVE-2025-40105", "CVE-2025-40135", "CVE-2025-40149", "CVE-2025-40196", "CVE-2025-40219", "CVE-2025-40261", "CVE-2025-40300", "CVE-2025-61984", "CVE-2025-61985", "CVE-2025-68206", "CVE-2025-68261", "CVE-2025-68264", "CVE-2025-68265", "CVE-2025-68266", "CVE-2025-68291", "CVE-2025-68337", "CVE-2025-68349", "CVE-2025-68363", "CVE-2025-68371", "CVE-2025-68724", "CVE-2025-68725", "CVE-2025-68742", "CVE-2025-68764", "CVE-2025-68773", "CVE-2025-68776", "CVE-2025-68782", "CVE-2025-68787", "CVE-2025-68788", "CVE-2025-68798", "CVE-2025-68803", "CVE-2025-68814", "CVE-2025-68816", "CVE-2025-68818", "CVE-2025-68820", "CVE-2025-71064", "CVE-2025-71075", "CVE-2025-71079", "CVE-2025-71085", "CVE-2025-71086", "CVE-2025-71088", "CVE-2025-71095", "CVE-2025-71097", "CVE-2025-71098", "CVE-2025-71104", "CVE-2025-71112", "CVE-2025-71113", "CVE-2025-71114", "CVE-2025-71120", "CVE-2025-71123", "CVE-2025-71131", "CVE-2025-71161", "CVE-2025-71162", "CVE-2025-71163", "CVE-2025-71185", "CVE-2025-71186", "CVE-2025-71189", "CVE-2025-71190", "CVE-2025-71191", "CVE-2025-71197", "CVE-2025-71221", "CVE-2025-71265", "CVE-2025-71266", "CVE-2025-71267", "CVE-2026-3497", "CVE-2026-22977", "CVE-2026-22979", "CVE-2026-22980", "CVE-2026-22982", "CVE-2026-22992", "CVE-2026-22994", "CVE-2026-23003", "CVE-2026-23005", "CVE-2026-23010", "CVE-2026-23011", "CVE-2026-23019", "CVE-2026-23026", "CVE-2026-23038", "CVE-2026-23054", "CVE-2026-23060", "CVE-2026-23083", "CVE-2026-23084", "CVE-2026-23086", "CVE-2026-23087", "CVE-2026-23095", "CVE-2026-23100", "CVE-2026-23103", "CVE-2026-23110", "CVE-2026-23111", "CVE-2026-23113", "CVE-2026-23154", "CVE-2026-23204", "CVE-2026-23231", "CVE-2026-23242", "CVE-2026-23243", "CVE-2026-23245", "CVE-2026-23255", "CVE-2026-23270", "CVE-2026-23271", "CVE-2026-23273", "CVE-2026-23274", "CVE-2026-23277", "CVE-2026-23284", "CVE-2026-23287", "CVE-2026-23290", "CVE-2026-23293", "CVE-2026-23300", "CVE-2026-23304", "CVE-2026-23319", "CVE-2026-23321", "CVE-2026-23335", "CVE-2026-23340", "CVE-2026-23343", "CVE-2026-23351", "CVE-2026-23359", "CVE-2026-23365", "CVE-2026-23368", "CVE-2026-23370", "CVE-2026-23378", "CVE-2026-23379", "CVE-2026-23381", "CVE-2026-23391", "CVE-2026-23392", "CVE-2026-23397", "CVE-2026-23398", "CVE-2026-23399", "CVE-2026-23414", "CVE-2026-23422", "CVE-2026-23434", "CVE-2026-23438", "CVE-2026-23439", "CVE-2026-23446", "CVE-2026-23449", "CVE-2026-23450", "CVE-2026-23452", "CVE-2026-23454", "CVE-2026-23455", "CVE-2026-23456", "CVE-2026-23457", "CVE-2026-23458", "CVE-2026-23463", "CVE-2026-23474", "CVE-2026-23475", "CVE-2026-27135", "CVE-2026-31389", "CVE-2026-31391", "CVE-2026-31396", "CVE-2026-31402", "CVE-2026-31403", "CVE-2026-31411", "CVE-2026-31414", "CVE-2026-31415", "CVE-2026-31416", "CVE-2026-31417", "CVE-2026-31418", "CVE-2026-31421", "CVE-2026-31422", "CVE-2026-31423", "CVE-2026-31424", "CVE-2026-31427", "CVE-2026-31428", "CVE-2026-31441", "CVE-2026-31446", "CVE-2026-31447", "CVE-2026-31448", "CVE-2026-31449", "CVE-2026-31450", "CVE-2026-31452", "CVE-2026-31466", "CVE-2026-31469", "CVE-2026-31485", "CVE-2026-31494", "CVE-2026-31495", "CVE-2026-31496", "CVE-2026-31503", "CVE-2026-31504", "CVE-2026-31507", "CVE-2026-31508", "CVE-2026-31515", "CVE-2026-31518", "CVE-2026-31521", "CVE-2026-31533", "CVE-2026-31546", "CVE-2026-31555", "CVE-2026-31563", "CVE-2026-31565", "CVE-2026-31628", "CVE-2026-31634", "CVE-2026-31649", "CVE-2026-31651", "CVE-2026-31658", "CVE-2026-31664", "CVE-2026-31665", "CVE-2026-31669", "CVE-2026-31670", "CVE-2026-31671", "CVE-2026-31674", "CVE-2026-31680", "CVE-2026-31681", "CVE-2026-31682", "CVE-2026-31700", "CVE-2026-31737", "CVE-2026-31752", "CVE-2026-31761", "CVE-2026-31768", "CVE-2026-40355", "CVE-2026-41989", "CVE-2026-43011", "CVE-2026-43024", "CVE-2026-43025", "CVE-2026-43026", "CVE-2026-43027", "CVE-2026-43028", "CVE-2026-43030", "CVE-2026-43033", "CVE-2026-43035", "CVE-2026-43038", "CVE-2026-43040", "CVE-2026-43057", "CVE-2026-43071", "CVE-2026-43085", "CVE-2026-43089", "CVE-2026-43116", "CVE-2026-43216", "CVE-2026-43303", "CVE-2026-43492", "CVE-2026-43499", "CVE-2026-43501", "CVE-2026-45841", "CVE-2026-46015", "CVE-2026-46021", "CVE-2026-46033", "CVE-2026-46037", "CVE-2026-46040", "CVE-2026-46046", "CVE-2026-46086", "CVE-2026-46101", "CVE-2026-46116", "CVE-2026-46132", "CVE-2026-46172", "CVE-2026-46173", "CVE-2026-46174", "CVE-2026-46193", "CVE-2026-46303", "CVE-2026-46306", "CVE-2026-46323", "CVE-2026-46333", "CVE-2026-52910", "CVE-2026-52912", "CVE-2026-52930", "CVE-2026-52933", "CVE-2026-52942", "CVE-2026-52943", "CVE-2026-52946", "CVE-2026-52970", "CVE-2026-52986", "CVE-2026-52998", "CVE-2026-52999", "CVE-2026-53001", "CVE-2026-53002", "CVE-2026-53006", "CVE-2026-53012", "CVE-2026-53050", "CVE-2026-53134", "CVE-2026-53218", "CVE-2026-53219", "CVE-2026-53223", "CVE-2026-53236", "CVE-2026-53239", "CVE-2026-53249", "CVE-2026-53268", "CVE-2026-53269", "CVE-2026-53275", "CVE-2026-53295", "CVE-2026-53352", "CVE-2026-53400", "CVE-2026-63810", "CVE-2026-64279", "CVE-2026-64317", "CVE-2026-64370", "CVE-2026-64371", "CVE-2026-64375", "CVE-2026-64411", "CVE-2026-64412", "CVE-2026-64413", "CVE-2026-64422", "CVE-2026-64423", "CVE-2026-64425", "CVE-2026-64538", "CVE-2026-64545", "CVE-2026-64552", "CVE-2026-64560" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens RUGGEDCOM CROSSBOW | CISA\n\nSummary\n\nRUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service. Siemens has released a new version for RUGGEDCOM CROSSBOW and recommends to update to the latest version.\n\nThe following versions of Siemens RUGGEDCOM CROSSBOW are affected:\n\nRUGGEDCOM CROSSBOW vers:intdot/<6.0 (CVE-2026-89196, CVE-2026-89197, CVE-2026-89198, CVE-2026-89199, CVE-2026-89200, CVE-2026-89201, CVE-2026-89202, CVE-2026-89203, CVE-2026-89204, CVE-2026-89205, CVE-2026-89206)\n\nCVSS\nVendor\nEquipment\n\nv3 8.8\nSiemens\nRUGGEDCOM CROSSBOW\n\n4 Vulnerabilities\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Authorization Bypass Through User-Controlled Key, Insertion of Sensitive Information Into Sent Data, Client-Side Enforcement of Server-Side Security\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nExpand All +\n\nCVE-2026-89196\n\nAffected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.\n\nRead More\n\n1 Affected Product\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n8.8\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details\n\nCVE-2026-89197\n\nAffected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.\n\nRead More\n\n2 Affected Products\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n8.8\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details\n\nCVE-2026-89198\n\nAffected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.\n\nRead More\n\n3 Affected Products\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n8.8\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details\n\nCVE-2026-89199\n\nAffected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.\n\nRead More\n\n4 Affected Products\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-639 Authorization Bypass Through User-Controlled Key\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n8.8\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details\n\nCVE-2026-89200\n\nAffected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands on the underlying database.\n\nRead More\n\n5 Affected Products\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n6.7\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details\n\nCVE-2026-89201\n\nAffected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.\n\nRead More\n\n6 Affected Products\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details\n\nCVE-2026-89202\n\nAffected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including administrators, leading to a denial of service.\n\nRead More\n\n7 Affected Products\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-639 Authorization Bypass Through User-Controlled Key\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n6.5\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\nView CVE Details\n\nCVE-2026-89203\n\nAffected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level. This could allow an authenticated attacker to gather sensitive information about the system's infrastructure, including details on all devices, substations, users, and scheduled activities.\n\nRead More\n\n8 Affected Products\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-201 Insertion of Sensitive Information Into Sent Data\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n4.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N\n\nView CVE Details\n\nCVE-2026-89204\n\nAffected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized information disclosure and data manipulation.\n\nRead More\n\n9 Affected Products\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-639 Authorization Bypass Through User-Controlled Key\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n5.4\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N\n\nView CVE Details\n\nCVE-2026-89205\n\nAffected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.\n\nRead More\n\n10 Affected Products\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-602 Client-Side Enforcement of Server-Side Security\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n6.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L\n\nView CVE Details\n\nCVE-2026-89206\n\nAffected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delete scheduled tasks without proper authorization.\n\nRead More\n\n11 Affected Products\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-602 Client-Side Enforcement of Server-Side Security\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n6.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L\n\nView CVE Details", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-89196", "CVE-2026-89197", "CVE-2026-89198", "CVE-2026-89199", "CVE-2026-89200", "CVE-2026-89201", "CVE-2026-89202", "CVE-2026-89203", "CVE-2026-89204", "CVE-2026-89205", "CVE-2026-89206" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens WinCC | CISA\n\nSummary\n\nMultiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens WinCC are affected:\n\nSIMATIC WinCC V7.5 vers:all/* (CVE-2026-59241)\n\nSIMATIC WinCC V8.0 vers:intdot/<8.0.0.11 (CVE-2026-59241)\n\nSIMATIC WinCC V8.1 vers:intdot/<8.1.7 (CVE-2026-59241)\n\nCVSS\nVendor\nEquipment\n\nv3 8.8\nSiemens\nSIMATIC WinCC V7.5\n\n1 Vulnerability\n\nIncorrect Privilege Assignment\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nCVE-2026-59241\n\nThe affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system.\n\nRead More\n\n3 Affected Products\n\nSIMATIC WinCC V7.5\n\nProduct Status: known_affected\n\nRemediations\n\nNone available\nCurrently no fix is available\n\nSIMATIC WinCC V8.0 < V8.0 Update 11\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V8.0 Update 11 or later version\n\nSIMATIC WinCC V8.1 < V8.1 Update 7\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V8.1 Update 7 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-266 Incorrect Privilege Assignment\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n8.8\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-59241" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-14", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-14", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens SIMATIC S7 PLCs Web Server | CISA\n\nSummary\n\nSIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of that user’s authorization. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens SIMATIC S7 PLCs Web Server are affected:\n\nSIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DK03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SM03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DK01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DM03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP CPU 1514SP-2 PN (6ES7514-2DN03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUs vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CL03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FL03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TL03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UL03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CM03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL02-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AM03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL02-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FM03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1513pro F-2 PN (6ES7513-2GM03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1513pro-2 PN (6ES7513-2PM03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AM02-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1515-2 PN (6ES7515-2AN03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FM02-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1515F-2 PN (6ES7515-2FN03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TM01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1515T-2 PN (6ES7515-2TN03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UM01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1515TF-2 PN (6ES7515-2UN03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AN02-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1516-3 PN/DP (6ES7516-3AP03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FN02-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1516F-3 PN/DP (6ES7516-3FP03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1516pro F-2 PN (6ES7516-2GP03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1516pro-2 PN (6ES7516-2PP03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1516T-3 PN (6ES7516-3TP10-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1516T-3 PN/DP (6ES7516-3TN00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1516TF-3 PN (6ES7516-3UP10-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1516TF-3 PN/DP (6ES7516-3UN00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1517-3 PN (6ES7517-3AQ10-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1517-3 PN/DP (6ES7517-3AP00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1517F-3 PN (6ES7517-3FQ10-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1517F-3 PN/DP (6ES7517-3FP01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1517T-3 PN (6ES7517-3TQ10-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1517T-3 PN/DP (6ES7517-3TP00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1517TF-3 PN (6ES7517-3UQ10-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1517TF-3 PN/DP (6ES7517-3UP00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1518-3 PN (6ES7518-3AT10-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP (6ES7518-4AP00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1518F-3 PN (6ES7518-3FT10-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP (6ES7518-4FP00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1518T-3 PN (6ES7518-3TT10-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1518T-4 PN/DP (6ES7518-4TP00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1518TF-3 PN (6ES7518-3UT10-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU 1518TF-4 PN/DP (6ES7518-4UP00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK (6ES7518-4AP00-3AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK (6ES7518-4FP00-3AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN (6ES7513-2GL00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN (6ES7513-2PL00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN (6ES7516-2GN00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN (6ES7516-2PN00-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller CPU 1507S F V2 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller CPU 1507S F V3 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller CPU 1507S F V4 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller CPU 1507S V2 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller CPU 1507S V3 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller CPU 1507S V4 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller CPU 1508S F V2 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller CPU 1508S F V3 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller CPU 1508S F V4 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller CPU 1508S T V3 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller CPU 1508S TF V3 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller CPU 1508S V2 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller CPU 1508S V3 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller CPU 1508S V4 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller Linux V2 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-1500 Software Controller Linux V3 vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC S7-PLCSIM Advanced vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIPLUS ET 200SP CPU 1510SP F-1 PN (6AG1510-1SJ01-2AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIPLUS ET 200SP CPU 1510SP F-1 PN RAIL (6AG2510-1SJ01-1AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-2AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIPLUS ET 200SP CPU 1510SP-1 PN (6AG1510-1DJ01-7AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-1AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIPLUS ET 200SP CPU 1510SP-1 PN RAIL (6AG2510-1DJ01-4AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-2AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIPLUS ET 200SP CPU 1512SP F-1 PN (6AG1512-1SK01-7AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-1AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIPLUS ET 200SP CPU 1512SP F-1 PN RAIL (6AG2512-1SK01-4AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIPLUS ET 200SP CPU 1512SP-1 PN (6AG1512-1DK01-2AB0", "truncated": true, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-63350", "CVE-2026-63351", "CVE-2026-63352", "CVE-2026-63353", "CVE-2026-63354", "CVE-2026-63355", "CVE-2026-63356", "CVE-2026-63357" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens RUGGEDCOM CROSSBOW Station Access Controller | CISA\n\nSummary\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.\n\nThe following versions of Siemens RUGGEDCOM CROSSBOW Station Access Controller are affected:\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) vers:intdot/<6.0 (CVE-2025-6965, CVE-2025-70873, CVE-2025-71316, CVE-2026-11822, CVE-2026-11824)\n\nCVSS\nVendor\nEquipment\n\nv3 9.8\nSiemens\nRUGGEDCOM CROSSBOW Station Access Controller (SAC)\n\n4 Vulnerabilities\n\nNumeric Truncation Error, Improper Clearing of Heap Memory Before Release ('Heap Inspection'), Improper Handling of Unicode Encoding, Heap-based Buffer Overflow\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nExpand All +\n\nCVE-2025-6965\n\nThere exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.\n\nRead More\n\n1 Affected Product\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-197 Numeric Truncation Error\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.7\nHIGH\nCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L\n\nView CVE Details\n\nCVE-2025-70873\n\nAn information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.\n\nRead More\n\n2 Affected Products\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n\nView CVE Details\n\nCVE-2025-71316\n\nSQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load an arbitrary DLL with a crafted command line argument string that results in command line file arguments being misinterpreted as command line options. Fixed on or around 2025-12-26.\n\nRead More\n\n3 Affected Products\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-176 Improper Handling of Unicode Encoding\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details\n\nCVE-2026-11822\n\nSQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.\n\nRead More\n\n4 Affected Products\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\nView CVE Details\n\nCVE-2026-11824\n\nSQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.\n\nRead More\n\n5 Affected Products\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\nView CVE Details", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2025-6965", "CVE-2025-70873", "CVE-2025-71316", "CVE-2026-11822", "CVE-2026-11824" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-16", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-16", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens SIMATIC S7-1500 TM MFP | CISA\n\nSummary\n\nMultiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens SIMATIC S7-1500 TM MFP are affected:\n\nSIMATIC S7-1500 TM MFP - GNU/Linux subsystem vers:all/*\n\nCVSS\nVendor\nEquipment\n\nv3 10\nSiemens\nSIMATIC S7-1500 TM MFP - GNU/Linux subsystem\n\n377 Vulnerabilities\n\nAccess of Uninitialized Pointer, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Deadlock, Detection of Error Condition Without Action, Double Free, Expired Pointer Dereference, Heap-based Buffer Overflow, Improper Control of Resource Identifiers ('Resource Injection'), Improper Control of a Resource Through its Lifetime, Improper Handling of Length Parameter Inconsistency, Improper Handling of Missing Special Element, Improper Handling of Structural Elements, Improper Input Validation, Improper Locking, Improper Resource Locking, Improper Restriction of Operations within the Bounds of a Memory Buffer, Improper Update of Reference Count, Improper Validation of Array Index, Improper Validation of Consistency within Input, Improper Validation of Specified Index, Position, or Offset in Input, Improper Validation of Specified Quantity in Input, Improper Validation of Specified Type of Input, Incorrect Synchronization, Integer Overflow or Wraparound, Integer Underflow (Wrap or Wraparound), Loop with Unreachable Exit Condition ('Infinite Loop'), Missing Default Case in Multiple Condition Expression, Missing Initialization of Resource, Missing Lock Check, Missing Release of Memory after Effective Lifetime, Missing Release of Resource after Effective Lifetime, Multiple Locks of a Critical Resource, NULL Pointer Dereference, Operation on a Resource after Expiration or Release, Out-of-bounds Read, Out-of-bounds Write, Plaintext Storage of a Password, Release of Invalid Pointer or Reference, Return of Wrong Status Code, Signal Handler Race Condition, Time-of-check Time-of-use (TOCTOU) Race Condition, Unchecked Return Value, Use After Free, Use of Incorrect Operator, Use of Uninitialized Resource, Write-what-where Condition\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nExpand All +\n\nCVE-2023-52927\n\nIn the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nf_ct_find_expectation Currently nf_conntrack_in() calling nf_ct_find_expectation() will remove the exp from the hash table. However, in some scenario, we expect the exp not to be removed when the created ct will not be confirmed, like in OVS and TC conntrack in the following patches. This patch allows exp not to be removed by setting IPS_CONFIRMED in the status of the tmpl.\n\nRead More\n\n1 Affected Product\n\nSIMATIC S7-1500 TM MFP - GNU/Linux subsystem\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.\n\nMitigation\nOnly build and run applications from trusted sources.\n\nNone available\nCurrently no fix is available\n\nAdditional Metrics\n\nRelevant CWE: CWE-20 Improper Input Validation\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details\n\nCVE-2023-52927\n\nCVE-2023-53292\n\nCVE-2023-54271\n\nCVE-2024-26982\n\nCVE-2024-36922\n\nCVE-2024-40945\n\nCVE-2024-47809\n\nCVE-2024-49998\n\nCVE-2024-53166\n\nCVE-2024-56647\n\nCVE-2024-56657\n\nCVE-2024-56719\n\nCVE-2024-57977\n\nCVE-2024-57979\n\nCVE-2024-57980\n\nCVE-2024-57981\n\nCVE-2024-57986\n\nCVE-2024-57993\n\nCVE-2024-57996\n\nCVE-2024-58002\n\nCVE-2024-58005\n\nCVE-2024-58009\n\nCVE-2024-58013\n\nCVE-2024-58014\n\nCVE-2024-58017\n\nCVE-2024-58020\n\nCVE-2024-58058\n\nCVE-2024-58061\n\nCVE-2024-58063\n\nCVE-2024-58068\n\nCVE-2024-58071\n\nCVE-2024-58072\n\nCVE-2024-58077\n\nCVE-2024-58079\n\nCVE-2024-58083\n\nCVE-2025-21682\n\nCVE-2025-21700\n\nCVE-2025-21702\n\nCVE-2025-21703\n\nCVE-2025-21704\n\nCVE-2025-21705\n\nCVE-2025-21706\n\nCVE-2025-21707\n\nCVE-2025-21708\n\nCVE-2025-21716\n\nCVE-2025-21719\n\nCVE-2025-21724\n\nCVE-2025-21725\n\nCVE-2025-21726\n\nCVE-2025-21727\n\nCVE-2025-21728\n\nCVE-2025-21731\n\nCVE-2025-21735\n\nCVE-2025-21738\n\nCVE-2025-21744\n\nCVE-2025-21745\n\nCVE-2025-21753\n\nCVE-2025-21756\n\nCVE-2025-21758\n\nCVE-2025-21760\n\nCVE-2025-21761\n\nCVE-2025-21762\n\nCVE-2025-21763\n\nCVE-2025-21764\n\nCVE-2025-21765\n\nCVE-2025-21766\n\nCVE-2025-21767\n\nCVE-2025-21776\n\nCVE-2025-21779\n\nCVE-2025-21787\n\nCVE-2025-21790\n\nCVE-2025-21791\n\nCVE-2025-21795\n\nCVE-2025-21796\n\nCVE-2025-21806\n\nCVE-2025-21814\n\nCVE-2025-21830\n\nCVE-2025-21832\n\nCVE-2025-21835\n\nCVE-2025-21838\n\nCVE-2025-21844\n\nCVE-2025-21846\n\nCVE-2025-21858\n\nCVE-2025-21859\n\nCVE-2025-21862\n\nCVE-2025-21863\n\nCVE-2025-21864\n\nCVE-2025-21865\n\nCVE-2025-22105\n\nCVE-2025-23131\n\nCVE-2025-38105\n\nCVE-2025-38162\n\nCVE-2025-38192\n\nCVE-2025-38250\n\nCVE-2025-38584\n\nCVE-2025-38704\n\nCVE-2025-39748\n\nCVE-2025-39863\n\nCVE-2025-39997\n\nCVE-2025-40135\n\nCVE-2025-68206\n\nCVE-2025-68239\n\nCVE-2025-68265\n\nCVE-2026-23066\n\nCVE-2026-23100\n\nCVE-2026-23113\n\nCVE-2026-23141\n\nCVE-2026-23154\n\nCVE-2026-23157\n\nCVE-2026-23204\n\nCVE-2026-23231\n\nCVE-2026-23245\n\nCVE-2026-23253\n\nCVE-2026-23255\n\nCVE-2026-23270\n\nCVE-2026-23271\n\nCVE-2026-23272\n\nCVE-2026-23273\n\nCVE-2026-23274\n\nCVE-2026-23277\n\nCVE-2026-23278\n\nCVE-2026-23279\n\nCVE-2026-23281\n\nCVE-2026-23290\n\nCVE-2026-23291\n\nCVE-2026-23292\n\nCVE-2026-23296\n\nCVE-2026-23300\n\nCVE-2026-23302\n\nCVE-2026-23303\n\nCVE-2026-23304\n\nCVE-2026-23310\n\nCVE-2026-23312\n\nCVE-2026-23315\n\nCVE-2026-23317\n\nCVE-2026-23318\n\nCVE-2026-23319\n\nCVE-2026-23321\n\nCVE-2026-23336\n\nCVE-2026-23339\n\nCVE-2026-23340\n\nCVE-2026-23343\n\nCVE-2026-23351\n\nCVE-2026-23352\n\nCVE-2026-23356\n\nCVE-2026-23357\n\nCVE-2026-23359\n\nCVE-2026-23364\n\nCVE-2026-23365\n\nCVE-2026-23367\n\nCVE-2026-23368\n\nCVE-2026-23370\n\nCVE-2026-23372\n\nCVE-2026-23378\n\nCVE-2026-23379\n\nCVE-2026-23381\n\nCVE-2026-23382\n\nCVE-2026-23388\n\nCVE-2026-23389\n\nCVE-2026-23391\n\nCVE-2026-23392\n\nCVE-2026-23395\n\nCVE-2026-23396\n\nCVE-2026-23397\n\nCVE-2026-23398\n\nCVE-2026-23399\n\nCVE-2026-23442\n\nCVE-2026-23444\n\nCVE-2026-31407\n\nCVE-2026-31449\n\nCVE-2026-31451\n\nCVE-2026-31488\n\nCVE-2026-31500\n\nCVE-2026-31532\n\nCVE-2026-31580\n\nCVE-2026-31583\n\nCVE-2026-31586\n\nCVE-2026-31611\n\nCVE-2026-31612\n\nCVE-2026-31613\n\nCVE-2026-31617\n\nCVE-2026-31622\n\nCVE-2026-31624\n\nCVE-2026-31625\n\nCVE-2026-31629\n\nCVE-2026-31630\n\nCVE-2026-31637\n\nCVE-2026-31642\n\nCVE-2026-31673\n\nCVE-2026-31676\n\nCVE-2026-31681\n\nCVE-2026-31685\n\nCVE-2026-31694\n\nCVE-2026-31696\n\nCVE-2026-31697\n\nCVE-2026-31698\n\nCVE-2026-31699\n\nCVE-2026-31700\n\nCVE-2026-31704\n\nCVE-2026-31705\n\nCVE-2026-31708\n\nCVE-2026-31709\n\nCVE-2026-31711\n\nCVE-2026-31712\n\nCVE-2026-43052\n\nCVE-2026-43071\n\nCVE-2026-43074\n\nCVE-2026-43080\n\nCVE-2026-43085\n\nCVE-2026-43089\n\nCVE-2026-43093\n\nCVE-2026-43094\n\nCVE-2026-43099\n\nCVE-2026-43110\n\nCVE-2026-43111\n\nCVE-2026-43112\n\nCVE-2026-43114\n\nCVE-2026-43116\n\nCVE-2026-43117\n\nCVE-2026-43303\n\nCVE-2026-43350\n\nCVE-2026-43421\n\nCVE-2026-43492\n\nCVE-2026-43493\n\nCVE-2026-43496\n\nCVE-2026-43499\n\nCVE-2026-43502\n\nCVE-2026-43503\n\nCVE-2026-45834\n\nCVE-2026-45835\n\nCVE-2026-45836\n\nCVE-2026-45838\n\nCVE-2026-45839\n\nCVE-2026-45840\n\nCVE-2026-45841\n\nCVE-2026-45842\n\nCVE-2026-45843\n\nCVE-2026-45844\n\nCVE-2026-45850\n\nCVE-2026-45991\n\nCVE-2026-45997\n\nCVE-2026-46003\n\nCVE-2026-46015\n\nCVE-2026-46018\n\nCVE-2026-46021\n\nCVE-2026-46022\n\nCVE-2026-46023\n\nCVE-2026-46026\n\nCVE-2026-46033\n\nCVE-2026-46037\n\nCVE-2026-46038\n\nCVE-2026-46040\n\nCVE-2026-46044\n\nCVE-2026-46046\n\nCVE-2026-46047\n\nCVE-2026-46050\n\nCVE-2026-46051\n\nCVE-2026-46056\n\nCVE-2026-46064\n\nCVE-2026-46065\n\nCVE-2026-46069\n\nCVE-2026-46070\n\nCVE-2026-46083\n\nCVE-2026-46086\n\nCVE-2026-46088\n\nCVE-2026-46092\n\nCVE-2026-46099\n\nCVE-2026-46101\n\nCVE-2026-46102\n\nCVE-2026-46107\n\nCVE-2026-46110\n\nCVE-2026-46113\n\nCVE-2026-46116\n\nCVE-2026-46120\n\nCVE-2026-46122\n\nCVE-2026-46124\n\nCVE-2026-46125\n\nCVE-2026-46128\n\nCVE-2026-46136\n\nCVE-2026-46137\n\nCVE-2026-46146\n\nCVE-2026-46149\n\nCVE-2026-46150\n\nCVE-2026-46151\n\nCVE-2026-46159\n\nCVE-2026-46161\n\nCVE-2026-46163\n\nCVE-2026-46165\n\nCVE-2026-46167\n\nCVE-2026-46168\n\nCVE-2026-46172\n\nCVE-2026-46173\n\nCVE-2026-46177\n\nCVE-2026-46180\n\nCVE-2026-46185\n\nCVE-2026-46187\n\nCVE-2026-46190\n\nCVE-2026-46191\n\nCVE-2026-46193\n\nCVE-2026-46195\n\nCVE-2026-46196\n\nCVE-2026-46209\n\nCVE-2026-46214\n\nCVE-2026-46227\n\nCVE-2026-46234\n\nCVE-2026-46243\n\nCVE-2026-46275\n\nCVE-2026-46294\n\nCVE-2026-46303\n\nCVE-2026-46304\n\nCVE-2026-46306\n\nCVE-2026-46307\n\nCVE-2026-46320\n\nCVE-2026-46321\n\nCVE-2026-46322\n\nCVE-2026-46323\n\nCVE-2026-46331\n\nCVE-2026-52909\n\nCVE-2026-52910\n\nCVE-2026-52917\n\nCVE-2026-52918\n\nCVE-2026-52923\n\nCVE-2026-52928\n\nCVE-2026-52929\n\nCVE-2026-52930\n\nCVE-2026-52942\n\nCVE-2026-52943\n\nCVE-2026-52946\n\nCVE-2026-52947\n\nCVE-2026-52948\n\nCVE-2026-53080\n\nCVE-2026-53131\n\nCVE-2026-53146\n\nCVE-2026-53147\n\nCVE-2026-53148\n\nCVE-2026-53149\n\nCVE-2026-53150\n\nCVE-2026-53167\n\nCVE-2026-53168\n\nCVE-2026-53177\n\nCVE-2026-53181\n\nCVE-2026-53183\n\nCVE-2026-53184\n\nCVE-2026-53192\n\nCVE-2026-53198\n\nCVE-2026-53208\n\nCVE-2026-53212\n\nCVE-2026-53218\n\nCVE-2026-53219\n\nCVE-2026-53221\n\nCVE-2026-53225\n\nCVE-2026-53227\n\nCVE-2026-53228\n\nCVE-2026-53236\n\nCVE-2026-53239\n\nCVE-2026-53242\n\nCVE-2026-53245\n\nCVE-2026-53249\n\nCVE-2026-53253\n\nCVE-2026-53254\n\nCVE-2026-53255\n\nCVE-2026-53256\n\nCVE-2026-53263\n\nCVE-2026-53264\n\nCVE-2026-53265\n\nCVE-2026-53268\n\nCVE-2026-53269\n\nCVE-2026-53275\n\nCVE-2026-53325\n\nCVE-2026-53337\n\nCVE-2026-53349\n\nCVE-2026-53350\n\nCVE-2026-53352\n\nCVE-2026-53356\n\nCVE-2026-53358\n\nCVE-2026-53362\n\nCVE-2026-64560", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2023-52927", "CVE-2023-53292", "CVE-2023-54271", "CVE-2024-26982", "CVE-2024-36922", "CVE-2024-40945", "CVE-2024-47809", "CVE-2024-49998", "CVE-2024-53166", "CVE-2024-56647", "CVE-2024-56657", "CVE-2024-56719", "CVE-2024-57977", "CVE-2024-57979", "CVE-2024-57980", "CVE-2024-57981", "CVE-2024-57986", "CVE-2024-57993", "CVE-2024-57996", "CVE-2024-58002", "CVE-2024-58005", "CVE-2024-58009", "CVE-2024-58013", "CVE-2024-58014", "CVE-2024-58017", "CVE-2024-58020", "CVE-2024-58058", "CVE-2024-58061", "CVE-2024-58063", "CVE-2024-58068", "CVE-2024-58071", "CVE-2024-58072", "CVE-2024-58077", "CVE-2024-58079", "CVE-2024-58083", "CVE-2025-21682", "CVE-2025-21700", "CVE-2025-21702", "CVE-2025-21703", "CVE-2025-21704", "CVE-2025-21705", "CVE-2025-21706", "CVE-2025-21707", "CVE-2025-21708", "CVE-2025-21716", "CVE-2025-21719", "CVE-2025-21724", "CVE-2025-21725", "CVE-2025-21726", "CVE-2025-21727", "CVE-2025-21728", "CVE-2025-21731", "CVE-2025-21735", "CVE-2025-21738", "CVE-2025-21744", "CVE-2025-21745", "CVE-2025-21753", "CVE-2025-21756", "CVE-2025-21758", "CVE-2025-21760", "CVE-2025-21761", "CVE-2025-21762", "CVE-2025-21763", "CVE-2025-21764", "CVE-2025-21765", "CVE-2025-21766", "CVE-2025-21767", "CVE-2025-21776", "CVE-2025-21779", "CVE-2025-21787", "CVE-2025-21790", "CVE-2025-21791", "CVE-2025-21795", "CVE-2025-21796", "CVE-2025-21806", "CVE-2025-21814", "CVE-2025-21830", "CVE-2025-21832", "CVE-2025-21835", "CVE-2025-21838", "CVE-2025-21844", "CVE-2025-21846", "CVE-2025-21858", "CVE-2025-21859", "CVE-2025-21862", "CVE-2025-21863", "CVE-2025-21864", "CVE-2025-21865", "CVE-2025-22105", "CVE-2025-23131", "CVE-2025-38105", "CVE-2025-38162", "CVE-2025-38192", "CVE-2025-38250", "CVE-2025-38584", "CVE-2025-38704", "CVE-2025-39748", "CVE-2025-39863", "CVE-2025-39997", "CVE-2025-40135", "CVE-2025-68206", "CVE-2025-68239", "CVE-2025-68265", "CVE-2026-23066", "CVE-2026-23100", "CVE-2026-23113", "CVE-2026-23141", "CVE-2026-23154", "CVE-2026-23157", "CVE-2026-23204", "CVE-2026-23231", "CVE-2026-23245", "CVE-2026-23253", "CVE-2026-23255", "CVE-2026-23270", "CVE-2026-23271", "CVE-2026-23272", "CVE-2026-23273", "CVE-2026-23274", "CVE-2026-23277", "CVE-2026-23278", "CVE-2026-23279", "CVE-2026-23281", "CVE-2026-23290", "CVE-2026-23291", "CVE-2026-23292", "CVE-2026-23296", "CVE-2026-23300", "CVE-2026-23302", "CVE-2026-23303", "CVE-2026-23304", "CVE-2026-23310", "CVE-2026-23312", "CVE-2026-23315", "CVE-2026-23317", "CVE-2026-23318", "CVE-2026-23319", "CVE-2026-23321", "CVE-2026-23336", "CVE-2026-23339", "CVE-2026-23340", "CVE-2026-23343", "CVE-2026-23351", "CVE-2026-23352", "CVE-2026-23356", "CVE-2026-23357", "CVE-2026-23359", "CVE-2026-23364", "CVE-2026-23365", "CVE-2026-23367", "CVE-2026-23368", "CVE-2026-23370", "CVE-2026-23372", "CVE-2026-23378", "CVE-2026-23379", "CVE-2026-23381", "CVE-2026-23382", "CVE-2026-23388", "CVE-2026-23389", "CVE-2026-23391", "CVE-2026-23392", "CVE-2026-23395", "CVE-2026-23396", "CVE-2026-23397", "CVE-2026-23398", "CVE-2026-23399", "CVE-2026-23442", "CVE-2026-23444", "CVE-2026-31407", "CVE-2026-31449", "CVE-2026-31451", "CVE-2026-31488", "CVE-2026-31500", "CVE-2026-31532", "CVE-2026-31580", "CVE-2026-31583", "CVE-2026-31586", "CVE-2026-31611", "CVE-2026-31612", "CVE-2026-31613", "CVE-2026-31617", "CVE-2026-31622", "CVE-2026-31624", "CVE-2026-31625", "CVE-2026-31629", "CVE-2026-31630", "CVE-2026-31637", "CVE-2026-31642", "CVE-2026-31673", "CVE-2026-31676", "CVE-2026-31681", "CVE-2026-31685", "CVE-2026-31694", "CVE-2026-31696", "CVE-2026-31697", "CVE-2026-31698", "CVE-2026-31699", "CVE-2026-31700", "CVE-2026-31704", "CVE-2026-31705", "CVE-2026-31708", "CVE-2026-31709", "CVE-2026-31711", "CVE-2026-31712", "CVE-2026-43052", "CVE-2026-43071", "CVE-2026-43074", "CVE-2026-43080", "CVE-2026-43085", "CVE-2026-43089", "CVE-2026-43093", "CVE-2026-43094", "CVE-2026-43099", "CVE-2026-43110", "CVE-2026-43111", "CVE-2026-43112", "CVE-2026-43114", "CVE-2026-43116", "CVE-2026-43117", "CVE-2026-43303", "CVE-2026-43350", "CVE-2026-43421", "CVE-2026-43492", "CVE-2026-43493", "CVE-2026-43496", "CVE-2026-43499", "CVE-2026-43502", "CVE-2026-43503", "CVE-2026-45834", "CVE-2026-45835", "CVE-2026-45836", "CVE-2026-45838", "CVE-2026-45839", "CVE-2026-45840", "CVE-2026-45841", "CVE-2026-45842", "CVE-2026-45843", "CVE-2026-45844", "CVE-2026-45850", "CVE-2026-45991", "CVE-2026-45997", "CVE-2026-46003", "CVE-2026-46015", "CVE-2026-46018", "CVE-2026-46021", "CVE-2026-46022", "CVE-2026-46023", "CVE-2026-46026", "CVE-2026-46033", "CVE-2026-46037", "CVE-2026-46038", "CVE-2026-46040", "CVE-2026-46044", "CVE-2026-46046", "CVE-2026-46047", "CVE-2026-46050", "CVE-2026-46051", "CVE-2026-46056", "CVE-2026-46064", "CVE-2026-46065", "CVE-2026-46069", "CVE-2026-46070", "CVE-2026-46083", "CVE-2026-46086", "CVE-2026-46088", "CVE-2026-46092", "CVE-2026-46099", "CVE-2026-46101", "CVE-2026-46102", "CVE-2026-46107", "CVE-2026-46110", "CVE-2026-46113", "CVE-2026-46116", "CVE-2026-46120", "CVE-2026-46122", "CVE-2026-46124", "CVE-2026-46125", "CVE-2026-46128", "CVE-2026-46136", "CVE-2026-46137", "CVE-2026-46146", "CVE-2026-46149", "CVE-2026-46150", "CVE-2026-46151", "CVE-2026-46159", "CVE-2026-46161", "CVE-2026-46163", "CVE-2026-46165", "CVE-2026-46167", "CVE-2026-46168", "CVE-2026-46172", "CVE-2026-46173", "CVE-2026-46177", "CVE-2026-46180", "CVE-2026-46185", "CVE-2026-46187", "CVE-2026-46190", "CVE-2026-46191", "CVE-2026-46193", "CVE-2026-46195", "CVE-2026-46196", "CVE-2026-46209", "CVE-2026-46214", "CVE-2026-46227", "CVE-2026-46234", "CVE-2026-46243", "CVE-2026-46275", "CVE-2026-46294", "CVE-2026-46303", "CVE-2026-46304", "CVE-2026-46306", "CVE-2026-46307", "CVE-2026-46320", "CVE-2026-46321", "CVE-2026-46322", "CVE-2026-46323", "CVE-2026-46331", "CVE-2026-52909", "CVE-2026-52910", "CVE-2026-52917", "CVE-2026-52918", "CVE-2026-52923", "CVE-2026-52928", "CVE-2026-52929", "CVE-2026-52930", "CVE-2026-52942", "CVE-2026-52943", "CVE-2026-52946", "CVE-2026-52947", "CVE-2026-52948", "CVE-2026-53080", "CVE-2026-53131", "CVE-2026-53146", "CVE-2026-53147", "CVE-2026-53148", "CVE-2026-53149", "CVE-2026-53150", "CVE-2026-53167", "CVE-2026-53168", "CVE-2026-53177", "CVE-2026-53181", "CVE-2026-53183", "CVE-2026-53184", "CVE-2026-53192", "CVE-2026-53198", "CVE-2026-53208", "CVE-2026-53212", "CVE-2026-53218", "CVE-2026-53219", "CVE-2026-53221", "CVE-2026-53225", "CVE-2026-53227", "CVE-2026-53228", "CVE-2026-53236", "CVE-2026-53239", "CVE-2026-53242", "CVE-2026-53245", "CVE-2026-53249", "CVE-2026-53253", "CVE-2026-53254", "CVE-2026-53255", "CVE-2026-53256", "CVE-2026-53263", "CVE-2026-53264", "CVE-2026-53265", "CVE-2026-53268", "CVE-2026-53269", "CVE-2026-53275", "CVE-2026-53325", "CVE-2026-53337", "CVE-2026-53349", "CVE-2026-53350", "CVE-2026-53352", "CVE-2026-53356", "CVE-2026-53358", "CVE-2026-53362", "CVE-2026-64560" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens Industrial Edge Devices | CISA\n\nSummary\n\nSiemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens Industrial Edge Devices are affected:\n\nIndustrial Edge Cloud Device (IECD) vers:intdot/<1.28.1 (CVE-2026-44414)\n\nIndustrial Edge Own Device (IEOD) vers:intdot/<1.28.1 (CVE-2026-44414)\n\nIndustrial Edge Virtual Device (IEVD) vers:intdot/<1.28.1 (CVE-2026-44414)\n\nSCALANCE LPE9413 (6GK5998-3GS01-2AC2) vers:all/* (CVE-2026-44414)\n\nSCALANCE LPE9433 (6GK5998-3GS11-2AC2) vers:all/* (CVE-2026-44414)\n\nSIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3MB57-0BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3QB57-0BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3UB57-0BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3XB57-0BX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1) vers:all/* (CVE-2026-44415)\n\nSIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2) vers:intdot/<1.28.1.2 (CVE-2026-44414)\n\nSIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2) vers:intdot/<1.28.1.2 (CVE-2026-44414)\n\nSIMATIC IPC BX-21A Industrial Edge Device vers:intdot/<1.28.1.2 (CVE-2026-44414)\n\nSIMATIC IPC BX-39A Industrial Edge Device vers:intdot/<3.2.0.17 (CVE-2026-44414)\n\nSIMATIC IPC BX-59A Industrial Edge Device vers:intdot/<3.2.0.17 (CVE-2026-44414)\n\nSIMATIC IPC127E Industrial Edge Device vers:intdot/<3.2.0.17 (CVE-2026-44414)\n\nSIMATIC IPC227E Industrial Edge Device vers:intdot/<3.2.0.17 (CVE-2026-44414)\n\nSIMATIC IPC227G Industrial Edge Device vers:intdot/<3.2.0.17 (CVE-2026-44414)\n\nSIMATIC IPC427E Industrial Edge Device vers:intdot/<3.2.0.17 (CVE-2026-44414)\n\nSIMATIC IPC847E Industrial Edge Device vers:intdot/<3.2.0.17 (CVE-2026-44414)\n\nSIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1) vers:all/* (CVE-2026-44415)\n\nSIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1) vers:all/* (CVE-2026-44415)\n\nSIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1) vers:all/* (CVE-2026-44415)\n\nCVSS\nVendor\nEquipment\n\nv3 9.1\nSiemens\nIndustrial Edge Cloud Device (IECD)\n\n1 Vulnerability\n\nPath Traversal: '.../...//'\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nExpand All +\n\nCVE-2026-44414\n\nAffected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system.\n\nRead More\n\n15 Affected Products\n\nIndustrial Edge Cloud Device (IECD) < V1.28.1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.1 or later version\n\nIndustrial Edge Own Device (IEOD) < V1.28.1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.1 or later version\n\nIndustrial Edge Virtual Device (IEVD) < V1.28.1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.1 or later version\n\nSCALANCE LPE9413 (6GK5998-3GS01-2AC2)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSCALANCE LPE9433 (6GK5998-3GS11-2AC2)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2) < V1.28.1-2\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.1-2 or later version\n\nSIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2) < V1.28.1-2\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.1-2 or later version\n\nSIMATIC IPC BX-21A Industrial Edge Device < V1.28.1-2\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.1-2 or later version\n\nSIMATIC IPC BX-39A Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V3.2.0-17 or later version\n\nSIMATIC IPC BX-59A Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V3.2.0-17 or later version\n\nSIMATIC IPC127E Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V3.2.0-17 or later version\n\nSIMATIC IPC227E Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V3.2.0-17 or later version\n\nSIMATIC IPC227G Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V3.2.0-17 or later version\n\nSIMATIC IPC427E Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V3.2.0-17 or later version\n\nSIMATIC IPC847E Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V3.2.0-17 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-35 Path Traversal: '.../...//'\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n6.8\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N\n\nView CVE Details\n\nCVE-2026-44415\n\nAffected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.\n\nRead More\n\n66 Affected Products\n\nIndustrial Edge Cloud Device (IECD) < V1.28.1\n\nProduct Status: known_affected\n\nRemediations\n\nIndustrial Edge Own Device (IEOD) < V1.28.1\n\nProduct Status: known_affected\n\nRemediations\n\nIndustrial Edge Virtual Device (IEVD) < V1.28.1\n\nProduct Status: known_affected\n\nRemediations\n\nSCALANCE LPE9413 (6GK5998-3GS01-2AC2)\n\nProduct Status: known_affected\n\nRemediations\n\nSCALANCE LPE9433 (6GK5998-3GS11-2AC2)\n\nProduct Status: known_affected\n\nRemediations\n\nSIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2) < V1.28.1-2\n\nProduct Status: known_affected\n\nRemediations\n\nSIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2) < V1.28.1-2\n\nProduct Status: known_affected\n\nRemediations\n\nSIMATIC IPC BX-21A Industrial Edge Device < V1.28.1-2\n\nProduct Status: known_affected\n\nRemediations\n\nSIMATIC IPC BX-39A Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nSIMATIC IPC BX-59A Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nSIMATIC IPC127E Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nSIMATIC IPC227E Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nSIMATIC IPC227G Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nSIMATIC IPC427E Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nSIMATIC IPC847E Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nSIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3MB57-0BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3QB57-0BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3UB57-0BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3XB57-0BX0)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange", "truncated": true, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-44414", "CVE-2026-44415" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "Siemens RUGGEDCOM APE1808 Devices | CISA\n\nSummary\n\nNozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer support to receive patch and update information.\n\nThe following versions of Siemens RUGGEDCOM APE1808 Devices are affected:\n\nRUGGEDCOM APE1808 vers:all/* (CVE-2026-33387, CVE-2026-33388, CVE-2026-33389, CVE-2026-33391, CVE-2026-33920)\n\nCVSS\nVendor\nEquipment\n\nv3 7.5\nSiemens\nRUGGEDCOM APE1808\n\n4 Vulnerabilities\n\nImproper Neutralization of Special Elements Used in a Template Engine, Incorrect Authorization, Lack of Administrator Control over Security, Cross-Site Request Forgery (CSRF)\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nExpand All +\n\nCVE-2026-33387\n\nA template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into importing a malicious dashboard. When the victim views or imports the dashboard, the payload executes in their browser context, allowing the attacker to modify application data or disrupt application availability.\n\nRead More\n\n1 Affected Product\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nAdditional Metrics\n\nRelevant CWE: CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n4.6\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L\n\nView CVE Details\n\nCVE-2026-33388\n\nAn access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential values are not directly visible, but the user can delete entries or edit their properties. An attacker who deletes or edits an entry can disrupt authentication for dependent devices, and one who manipulates an entry's configuration may be able to indirectly obtain the credentials.\n\nRead More\n\n2 Affected Products\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nAdditional Metrics\n\nRelevant CWE: CWE-863 Incorrect Authorization\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.4\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L\n\nView CVE Details\n\nCVE-2026-33389\n\nAn improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provided to enable it. A man-in-the-middle attacker positioned between a sensor and a polled device can, during a polling session, impersonate the device and intercept the communication, including the credentials used to access it. The captured credentials can then be replayed to authenticate against the device itself or against other devices sharing the same credentials, allowing the attacker to access and tamper with the device's data and to disrupt its operations.\n\nRead More\n\n3 Affected Products\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nAdditional Metrics\n\nRelevant CWE: CWE-671 Lack of Administrator Control over Security\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L\n\nView CVE Details\n\nCVE-2026-33391\n\nAn access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modify the Smart Polling discovery configuration. This allows the attacker to disrupt the visibility of assets in the monitored network.\n\nRead More\n\n4 Affected Products\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nAdditional Metrics\n\nRelevant CWE: CWE-863 Incorrect Authorization\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n5.4\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L\n\nView CVE Details\n\nCVE-2026-33920\n\nA cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performed by the victim in this state is attributed to the attacker's account, compromising the integrity of the audit trail.\n\nRead More\n\n5 Affected Products\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nAdditional Metrics\n\nRelevant CWE: CWE-352 Cross-Site Request Forgery (CSRF)\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n3.5\nLOW\nCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N\n\nView CVE Details", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-33387", "CVE-2026-33388", "CVE-2026-33389", "CVE-2026-33391", "CVE-2026-33920" ] }, { "evidenceId": "linked:https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01", "sourceUrl": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01", "sourcePath": "article:summary-vulnerabilities-remediations", "text": "InterSystems Corporation InterSystems IRIS for Health | CISA\n\nSummary\n\nSuccessful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device.\n\nThe following versions of InterSystems Corporation InterSystems IRIS for Health are affected:\n\nInterSystems IRIS for Health 2026.2.0.221, 2026.1.0.235, 2025.3.0.226 (CVE-2026-111594, CVE-2026-111594, CVE-2026-111594)\n\nCVSS\nVendor\nEquipment\n\nv3 8.1\nInterSystems Corporation\nInterSystems IRIS for Health\n\n1 Vulnerability\n\nCleartext Transmission of Sensitive Information\n\nBackground\n\nCritical Infrastructure Sectors: Healthcare and Public Health\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: United States\n\nVulnerabilities\n\nCVE-2026-111594\n\nInterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.\n\nRead More\n\n3 Affected Products\n\nInterSystems Corporation InterSystems IRIS for Health: 2026.2.0.221\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nInterSystems recommends users configure IRIS superserver to require SSL/TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist Note that there are three settings: \"Disabled\", which means that client communications do not use TLS. \"Enabled\", which means that client communications may use TLS (but they also may not) and \"Required\", which forces all client communications to use TLS.\n\nMitigation\nInterSystems documentation explains how to configure the server to require TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver\n\nMitigation\nFor more information about how to configure a system to mitigate this vulnerability, contact InterSystems at their world wide response center: https://wrc.intersystems.com (login required)\n\nInterSystems Corporation InterSystems IRIS for Health: 2026.1.0.235\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nInterSystems recommends users configure IRIS superserver to require SSL/TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist Note that there are three settings: \"Disabled\", which means that client communications do not use TLS. \"Enabled\", which means that client communications may use TLS (but they also may not) and \"Required\", which forces all client communications to use TLS.\n\nMitigation\nInterSystems documentation explains how to configure the server to require TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver\n\nMitigation\nFor more information about how to configure a system to mitigate this vulnerability, contact InterSystems at their world wide response center: https://wrc.intersystems.com (login required)\n\nInterSystems Corporation InterSystems IRIS for Health: 2025.3.0.226\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nInterSystems recommends users configure IRIS superserver to require SSL/TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist Note that there are three settings: \"Disabled\", which means that client communications do not use TLS. \"Enabled\", which means that client communications may use TLS (but they also may not) and \"Required\", which forces all client communications to use TLS.\n\nMitigation\nInterSystems documentation explains how to configure the server to require TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver\n\nMitigation\nFor more information about how to configure a system to mitigate this vulnerability, contact InterSystems at their world wide response center: https://wrc.intersystems.com (login required)\n\nAdditional Metrics\n\nRelevant CWE: CWE-319 Cleartext Transmission of Sensitive Information\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n8.1\nHIGH\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n4.0\n9.2\nCRITICAL\nCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\n\nView CVE Details", "truncated": false, "representation": "html_text_excerpt", "relatedCves": [ "CVE-2026-111594" ] } ], "limits": { "completeness": "bounded", "truncatedFields": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-14", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17" ], "note": "JVNの日本語本文を取得しています。複数CVEの一括情報は分割せず、影響なし・修正版の番号を推測しません。参照先ページ本文は含みません。 公式の関連CVE・指定された公的機関と開発元の告知本文を追加しています。複数の告知・CVEに共通の修正版があるとは扱わず、それぞれの製品・条件と対応を照合してください。", "linkedSourceErrors": [] }, "relatedCves": [ "CVE-2026-101104", "CVE-2026-96613", "CVE-2026-109122", "CVE-2026-111100", "CVE-2026-96616", "CVE-2026-105265", "CVE-2026-110491", "CVE-2026-107861", "CVE-2026-110243", "CVE-2026-92450", "CVE-2026-110825", "CVE-2026-78556", "CVE-2026-78557", "CVE-2026-110936", "CVE-2026-89208", "CVE-2024-7322", "CVE-2026-84854", "CVE-2026-72895", "CVE-2026-102073", "CVE-2026-102074", "CVE-2026-102075", "CVE-2026-102076", "CVE-2026-44414", "CVE-2026-44415", "CVE-2026-85114", "CVE-2026-85115", "CVE-2021-41617", "CVE-2023-28531", "CVE-2023-51384", "CVE-2023-52927", "CVE-2023-53292", "CVE-2024-26783", "CVE-2024-27056", "CVE-2024-28956", "CVE-2024-36903", "CVE-2024-36927", "CVE-2024-42079", "CVE-2024-46786", "CVE-2024-47736", "CVE-2024-47809", "CVE-2024-49968", "CVE-2024-49994", "CVE-2024-49998", "CVE-2024-50014", "CVE-2024-50063", "CVE-2024-50164", "CVE-2024-50298", "CVE-2024-53124", "CVE-2024-53170", "CVE-2024-54458", "CVE-2024-56631", "CVE-2024-56703", "CVE-2024-56719", "CVE-2024-57917", "CVE-2024-57924", "CVE-2024-57973", "CVE-2024-57977", "CVE-2024-57979", "CVE-2024-58011", "CVE-2024-58016", "CVE-2024-58020", "CVE-2024-58056", "CVE-2024-58058", "CVE-2024-58061", "CVE-2024-58086", "CVE-2025-21645", "CVE-2025-21648", "CVE-2025-21655", "CVE-2025-21676", "CVE-2025-21682", "CVE-2025-21702", "CVE-2025-21705", "CVE-2025-21706", "CVE-2025-21707", "CVE-2025-21718", "CVE-2025-21731", "CVE-2025-21745", "CVE-2025-21758", "CVE-2025-21760", "CVE-2025-21764", "CVE-2025-21765", "CVE-2025-21780", "CVE-2025-21795", "CVE-2025-21796", "CVE-2025-21802", "CVE-2025-21814", "CVE-2025-21846", "CVE-2025-21853", "CVE-2025-21861", "CVE-2025-21863", "CVE-2025-21864", "CVE-2025-21867", "CVE-2025-21875", "CVE-2025-21887", "CVE-2025-21913", "CVE-2025-21919", "CVE-2025-21925", "CVE-2025-21926", "CVE-2025-21938", "CVE-2025-21959", "CVE-2025-21999", "CVE-2025-22005", "CVE-2025-22015", "CVE-2025-22055", "CVE-2025-22056", "CVE-2025-22060", "CVE-2025-22083", "CVE-2025-22090", "CVE-2025-22095", "CVE-2025-22107", "CVE-2025-22111", "CVE-2025-22121", "CVE-2025-23136", "CVE-2025-23143", "CVE-2025-37785", "CVE-2025-37909", "CVE-2025-37917", "CVE-2025-37945", "CVE-2025-37959", "CVE-2025-37964", "CVE-2025-37972", "CVE-2025-37980", "CVE-2025-38125", "CVE-2025-38162", "CVE-2025-38192", "CVE-2025-38201", "CVE-2025-38232", "CVE-2025-38322", "CVE-2025-38591", "CVE-2025-38614", "CVE-2025-38681", "CVE-2025-38704", "CVE-2025-38721", "CVE-2025-38725", "CVE-2025-38727", "CVE-2025-38732", "CVE-2025-38736", "CVE-2025-39681", "CVE-2025-39691", "CVE-2025-39721", "CVE-2025-39748", "CVE-2025-39756", "CVE-2025-39764", "CVE-2025-39770", "CVE-2025-39773", "CVE-2025-39782", "CVE-2025-39795", "CVE-2025-39826", "CVE-2025-39827", "CVE-2025-39845", "CVE-2025-39866", "CVE-2025-39871", "CVE-2025-39931", "CVE-2025-39953", "CVE-2025-39955", "CVE-2025-39964", "CVE-2025-39977", "CVE-2025-39978", "CVE-2025-39980", "CVE-2025-40022", "CVE-2025-40070", "CVE-2025-40078", "CVE-2025-40080", "CVE-2025-40105", "CVE-2025-40135", "CVE-2025-40149", "CVE-2025-40196", "CVE-2025-40219", "CVE-2025-40261", "CVE-2025-40300", "CVE-2025-61984", "CVE-2025-61985", "CVE-2025-68206", "CVE-2025-68261", "CVE-2025-68264", "CVE-2025-68265", "CVE-2025-68266", "CVE-2025-68291", "CVE-2025-68337", "CVE-2025-68349", "CVE-2025-68363", "CVE-2025-68371", "CVE-2025-68724", "CVE-2025-68725", "CVE-2025-68742", "CVE-2025-68764", "CVE-2025-68773", "CVE-2025-68776", "CVE-2025-68782", "CVE-2025-68787", "CVE-2025-68788", "CVE-2025-68798", "CVE-2025-68803", "CVE-2025-68814", "CVE-2025-68816", "CVE-2025-68818", "CVE-2025-68820", "CVE-2025-71064", "CVE-2025-71075", "CVE-2025-71079", "CVE-2025-71085", "CVE-2025-71086", "CVE-2025-71088", "CVE-2025-71095", "CVE-2025-71097", "CVE-2025-71098", "CVE-2025-71104", "CVE-2025-71112", "CVE-2025-71113", "CVE-2025-71114", "CVE-2025-71120", "CVE-2025-71123", "CVE-2025-71131", "CVE-2025-71161", "CVE-2025-71162", "CVE-2025-71163", "CVE-2025-71185", "CVE-2025-71186", "CVE-2025-71189", "CVE-2025-71190", "CVE-2025-71191", "CVE-2025-71197", "CVE-2025-71221", "CVE-2025-71265", "CVE-2025-71266", "CVE-2025-71267", "CVE-2026-3497", "CVE-2026-22977", "CVE-2026-22979", "CVE-2026-22980", "CVE-2026-22982", "CVE-2026-22992", "CVE-2026-22994", "CVE-2026-23003", "CVE-2026-23005", "CVE-2026-23010", "CVE-2026-23011", "CVE-2026-23019", "CVE-2026-23026", "CVE-2026-23038", "CVE-2026-23054", "CVE-2026-23060", "CVE-2026-23083", "CVE-2026-23084", "CVE-2026-23086", "CVE-2026-23087", "CVE-2026-23095", "CVE-2026-23100", "CVE-2026-23103", "CVE-2026-23110", "CVE-2026-23111", "CVE-2026-23113", "CVE-2026-23154", "CVE-2026-23204", "CVE-2026-23231", "CVE-2026-23242", "CVE-2026-23243", "CVE-2026-23245", "CVE-2026-23255", "CVE-2026-23270", "CVE-2026-23271", "CVE-2026-23273", "CVE-2026-23274", "CVE-2026-23277", "CVE-2026-23284", "CVE-2026-23287", "CVE-2026-23290", "CVE-2026-23293", "CVE-2026-23300", "CVE-2026-23304", "CVE-2026-23319", "CVE-2026-23321", "CVE-2026-23335", "CVE-2026-23340", "CVE-2026-23343", "CVE-2026-23351", "CVE-2026-23359", "CVE-2026-23365", "CVE-2026-23368", "CVE-2026-23370", "CVE-2026-23378", "CVE-2026-23379", "CVE-2026-23381", "CVE-2026-23391", "CVE-2026-23392", "CVE-2026-23397", "CVE-2026-23398", "CVE-2026-23399", "CVE-2026-23414", "CVE-2026-23422", "CVE-2026-23434", "CVE-2026-23438", "CVE-2026-23439", "CVE-2026-23446", "CVE-2026-23449", "CVE-2026-23450", "CVE-2026-23452", "CVE-2026-23454", "CVE-2026-23455", "CVE-2026-23456", "CVE-2026-23457", "CVE-2026-23458", "CVE-2026-23463", "CVE-2026-23474", "CVE-2026-23475", "CVE-2026-27135", "CVE-2026-31389", "CVE-2026-31391", "CVE-2026-31396", "CVE-2026-31402", "CVE-2026-31403", "CVE-2026-31411", "CVE-2026-31414", "CVE-2026-31415", "CVE-2026-31416", "CVE-2026-31417", "CVE-2026-31418", "CVE-2026-31421", "CVE-2026-31422", "CVE-2026-31423", "CVE-2026-31424", "CVE-2026-31427", "CVE-2026-31428", "CVE-2026-31441", "CVE-2026-31446", "CVE-2026-31447", "CVE-2026-31448", "CVE-2026-31449", "CVE-2026-31450", "CVE-2026-31452", "CVE-2026-31466", "CVE-2026-31469", "CVE-2026-31485", "CVE-2026-31494", "CVE-2026-31495", "CVE-2026-31496", "CVE-2026-31503", "CVE-2026-31504", "CVE-2026-31507", "CVE-2026-31508", "CVE-2026-31515", "CVE-2026-31518", "CVE-2026-31521", "CVE-2026-31533", "CVE-2026-31546", "CVE-2026-31555", "CVE-2026-31563", "CVE-2026-31565", "CVE-2026-31628", "CVE-2026-31634", "CVE-2026-31649", "CVE-2026-31651", "CVE-2026-31658", "CVE-2026-31664", "CVE-2026-31665", "CVE-2026-31669", "CVE-2026-31670", "CVE-2026-31671", "CVE-2026-31674", "CVE-2026-31680", "CVE-2026-31681", "CVE-2026-31682", "CVE-2026-31700", "CVE-2026-31737", "CVE-2026-31752", "CVE-2026-31761", "CVE-2026-31768", "CVE-2026-40355", "CVE-2026-41989", "CVE-2026-43011", "CVE-2026-43024", "CVE-2026-43025", "CVE-2026-43026", "CVE-2026-43027", "CVE-2026-43028", "CVE-2026-43030", "CVE-2026-43033", "CVE-2026-43035", "CVE-2026-43038", "CVE-2026-43040", "CVE-2026-43057", "CVE-2026-43071", "CVE-2026-43085", "CVE-2026-43089", "CVE-2026-43116", "CVE-2026-43216", "CVE-2026-43303", "CVE-2026-43492", "CVE-2026-43499", "CVE-2026-43501", "CVE-2026-45841", "CVE-2026-46015", "CVE-2026-46021", "CVE-2026-46033", "CVE-2026-46037", "CVE-2026-46040", "CVE-2026-46046", "CVE-2026-46086", "CVE-2026-46101", "CVE-2026-46116", "CVE-2026-46132", "CVE-2026-46172", "CVE-2026-46173", "CVE-2026-46174", "CVE-2026-46193", "CVE-2026-46303", "CVE-2026-46306", "CVE-2026-46323", "CVE-2026-46333", "CVE-2026-52910", "CVE-2026-52912", "CVE-2026-52930", "CVE-2026-52933", "CVE-2026-52942", "CVE-2026-52943", "CVE-2026-52946", "CVE-2026-52970", "CVE-2026-52986", "CVE-2026-52998", "CVE-2026-52999", "CVE-2026-53001", "CVE-2026-53002", "CVE-2026-53006", "CVE-2026-53012", "CVE-2026-53050", "CVE-2026-53134", "CVE-2026-53218", "CVE-2026-53219", "CVE-2026-53223", "CVE-2026-53236", "CVE-2026-53239", "CVE-2026-53249", "CVE-2026-53268", "CVE-2026-53269", "CVE-2026-53275", "CVE-2026-53295", "CVE-2026-53352", "CVE-2026-53400", "CVE-2026-63810", "CVE-2026-64279", "CVE-2026-64317", "CVE-2026-64370", "CVE-2026-64371", "CVE-2026-64375", "CVE-2026-64411", "CVE-2026-64412", "CVE-2026-64413", "CVE-2026-64422", "CVE-2026-64423", "CVE-2026-64425", "CVE-2026-64538", "CVE-2026-64545", "CVE-2026-64552", "CVE-2026-64560", "CVE-2026-89196", "CVE-2026-89197", "CVE-2026-89198", "CVE-2026-89199", "CVE-2026-89200", "CVE-2026-89201", "CVE-2026-89202", "CVE-2026-89203", "CVE-2026-89204", "CVE-2026-89205", "CVE-2026-89206", "CVE-2026-59241", "CVE-2026-63350", "CVE-2026-63351", "CVE-2026-63352", "CVE-2026-63353", "CVE-2026-63354", "CVE-2026-63355", "CVE-2026-63356", "CVE-2026-63357", "CVE-2025-6965", "CVE-2025-70873", "CVE-2025-71316", "CVE-2026-11822", "CVE-2026-11824", "CVE-2023-54271", "CVE-2024-26982", "CVE-2024-36922", "CVE-2024-40945", "CVE-2024-53166", "CVE-2024-56647", "CVE-2024-56657", "CVE-2024-57980", "CVE-2024-57981", "CVE-2024-57986", "CVE-2024-57993", "CVE-2024-57996", "CVE-2024-58002", "CVE-2024-58005", "CVE-2024-58009", "CVE-2024-58013", "CVE-2024-58014", "CVE-2024-58017", "CVE-2024-58063", "CVE-2024-58068", "CVE-2024-58071", "CVE-2024-58072", "CVE-2024-58077", "CVE-2024-58079", "CVE-2024-58083", "CVE-2025-21700", "CVE-2025-21703", "CVE-2025-21704", "CVE-2025-21708", "CVE-2025-21716", "CVE-2025-21719", "CVE-2025-21724", "CVE-2025-21725", "CVE-2025-21726", "CVE-2025-21727", "CVE-2025-21728", "CVE-2025-21735", "CVE-2025-21738", "CVE-2025-21744", "CVE-2025-21753", "CVE-2025-21756", "CVE-2025-21761", "CVE-2025-21762", "CVE-2025-21763", "CVE-2025-21766", "CVE-2025-21767", "CVE-2025-21776", "CVE-2025-21779", "CVE-2025-21787", "CVE-2025-21790", "CVE-2025-21791", "CVE-2025-21806", "CVE-2025-21830", "CVE-2025-21832", "CVE-2025-21835", "CVE-2025-21838", "CVE-2025-21844", "CVE-2025-21858", "CVE-2025-21859", "CVE-2025-21862", "CVE-2025-21865", "CVE-2025-22105", "CVE-2025-23131", "CVE-2025-38105", "CVE-2025-38250", "CVE-2025-38584", "CVE-2025-39863", "CVE-2025-39997", "CVE-2025-68239", "CVE-2026-23066", "CVE-2026-23141", "CVE-2026-23157", "CVE-2026-23253", "CVE-2026-23272", "CVE-2026-23278", "CVE-2026-23279", "CVE-2026-23281", "CVE-2026-23291", "CVE-2026-23292", "CVE-2026-23296", "CVE-2026-23302", "CVE-2026-23303", "CVE-2026-23310", "CVE-2026-23312", "CVE-2026-23315", "CVE-2026-23317", "CVE-2026-23318", "CVE-2026-23336", "CVE-2026-23339", "CVE-2026-23352", "CVE-2026-23356", "CVE-2026-23357", "CVE-2026-23364", "CVE-2026-23367", "CVE-2026-23372", "CVE-2026-23382", "CVE-2026-23388", "CVE-2026-23389", "CVE-2026-23395", "CVE-2026-23396", "CVE-2026-23442", "CVE-2026-23444", "CVE-2026-31407", "CVE-2026-31451", "CVE-2026-31488", "CVE-2026-31500", "CVE-2026-31532", "CVE-2026-31580", "CVE-2026-31583", "CVE-2026-31586", "CVE-2026-31611", "CVE-2026-31612", "CVE-2026-31613", "CVE-2026-31617", "CVE-2026-31622", "CVE-2026-31624", "CVE-2026-31625", "CVE-2026-31629", "CVE-2026-31630", "CVE-2026-31637", "CVE-2026-31642", "CVE-2026-31673", "CVE-2026-31676", "CVE-2026-31685", "CVE-2026-31694", "CVE-2026-31696", "CVE-2026-31697", "CVE-2026-31698", "CVE-2026-31699", "CVE-2026-31704", "CVE-2026-31705", "CVE-2026-31708", "CVE-2026-31709", "CVE-2026-31711", "CVE-2026-31712", "CVE-2026-43052", "CVE-2026-43074", "CVE-2026-43080", "CVE-2026-43093", "CVE-2026-43094", "CVE-2026-43099", "CVE-2026-43110", "CVE-2026-43111", "CVE-2026-43112", "CVE-2026-43114", "CVE-2026-43117", "CVE-2026-43350", "CVE-2026-43421", "CVE-2026-43493", "CVE-2026-43496", "CVE-2026-43502", "CVE-2026-43503", "CVE-2026-45834", "CVE-2026-45835", "CVE-2026-45836", "CVE-2026-45838", "CVE-2026-45839", "CVE-2026-45840", "CVE-2026-45842", "CVE-2026-45843", "CVE-2026-45844", "CVE-2026-45850", "CVE-2026-45991", "CVE-2026-45997", "CVE-2026-46003", "CVE-2026-46018", "CVE-2026-46022", "CVE-2026-46023", "CVE-2026-46026", "CVE-2026-46038", "CVE-2026-46044", "CVE-2026-46047", "CVE-2026-46050", "CVE-2026-46051", "CVE-2026-46056", "CVE-2026-46064", "CVE-2026-46065", "CVE-2026-46069", "CVE-2026-46070", "CVE-2026-46083", "CVE-2026-46088", "CVE-2026-46092", "CVE-2026-46099", "CVE-2026-46102", "CVE-2026-46107", "CVE-2026-46110", "CVE-2026-46113", "CVE-2026-46120", "CVE-2026-46122", "CVE-2026-46124", "CVE-2026-46125", "CVE-2026-46128", "CVE-2026-46136", "CVE-2026-46137", "CVE-2026-46146", "CVE-2026-46149", "CVE-2026-46150", "CVE-2026-46151", "CVE-2026-46159", "CVE-2026-46161", "CVE-2026-46163", "CVE-2026-46165", "CVE-2026-46167", "CVE-2026-46168", "CVE-2026-46177", "CVE-2026-46180", "CVE-2026-46185", "CVE-2026-46187", "CVE-2026-46190", "CVE-2026-46191", "CVE-2026-46195", "CVE-2026-46196", "CVE-2026-46209", "CVE-2026-46214", "CVE-2026-46227", "CVE-2026-46234", "CVE-2026-46243", "CVE-2026-46275", "CVE-2026-46294", "CVE-2026-46304", "CVE-2026-46307", "CVE-2026-46320", "CVE-2026-46321", "CVE-2026-46322", "CVE-2026-46331", "CVE-2026-52909", "CVE-2026-52917", "CVE-2026-52918", "CVE-2026-52923", "CVE-2026-52928", "CVE-2026-52929", "CVE-2026-52947", "CVE-2026-52948", "CVE-2026-53080", "CVE-2026-53131", "CVE-2026-53146", "CVE-2026-53147", "CVE-2026-53148", "CVE-2026-53149", "CVE-2026-53150", "CVE-2026-53167", "CVE-2026-53168", "CVE-2026-53177", "CVE-2026-53181", "CVE-2026-53183", "CVE-2026-53184", "CVE-2026-53192", "CVE-2026-53198", "CVE-2026-53208", "CVE-2026-53212", "CVE-2026-53221", "CVE-2026-53225", "CVE-2026-53227", "CVE-2026-53228", "CVE-2026-53242", "CVE-2026-53245", "CVE-2026-53253", "CVE-2026-53254", "CVE-2026-53255", "CVE-2026-53256", "CVE-2026-53263", "CVE-2026-53264", "CVE-2026-53265", "CVE-2026-53325", "CVE-2026-53337", "CVE-2026-53349", "CVE-2026-53350", "CVE-2026-53356", "CVE-2026-53358", "CVE-2026-53362", "CVE-2026-33387", "CVE-2026-33388", "CVE-2026-33389", "CVE-2026-33391", "CVE-2026-33920", "CVE-2026-111594" ], "supplementarySources": [ { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06", "title": "Meari IoT Cloud Platform OpenAPI Service (Update A) | CISA", "relatedCves": [ "CVE-2026-101104", "CVE-2026-96613" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "title": "Kiloview E3 NDI Encoder | CISA", "relatedCves": [ "CVE-2026-109122", "CVE-2026-111100", "CVE-2026-96616", "CVE-2026-105265", "CVE-2026-110491", "CVE-2026-107861", "CVE-2026-110243", "CVE-2026-92450", "CVE-2026-110825" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "title": "Siemens Industrial Edge App Publisher | CISA", "relatedCves": [ "CVE-2026-78556", "CVE-2026-78557" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03", "title": "Siemens Software Center | CISA", "relatedCves": [ "CVE-2026-110936" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "title": "Siemens Capital Embedded AR Classic | CISA", "relatedCves": [ "CVE-2026-89208" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-05", "title": "Siemens SENTRON 3NA COM Fuse | CISA", "relatedCves": [ "CVE-2024-7322" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06", "title": "Siemens PSS(R)SINCAL | CISA", "relatedCves": [ "CVE-2026-84854" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-07", "title": "Siemens SIMATIC IPCs | CISA", "relatedCves": [ "CVE-2026-72895" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08", "title": "Siemens APOGEE, TALON and Desigo PXC/PXM Products | CISA", "relatedCves": [ "CVE-2026-102073", "CVE-2026-102074", "CVE-2026-102075", "CVE-2026-102076", "CVE-2026-89208" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "title": "Siemens Industrial Edge Device Kit | CISA", "relatedCves": [ "CVE-2026-44414", "CVE-2026-44415" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10", "title": "Siemens SIMATIC S7 Webserver API | CISA", "relatedCves": [ "CVE-2026-85114", "CVE-2026-85115" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "title": "Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP | CISA", "relatedCves": [ "CVE-2021-41617", "CVE-2023-28531", "CVE-2023-51384", "CVE-2023-52927", "CVE-2023-53292", "CVE-2024-26783", "CVE-2024-27056", "CVE-2024-28956", "CVE-2024-36903", "CVE-2024-36927", "CVE-2024-42079", "CVE-2024-46786", "CVE-2024-47736", "CVE-2024-47809", "CVE-2024-49968", "CVE-2024-49994", "CVE-2024-49998", "CVE-2024-50014", "CVE-2024-50063", "CVE-2024-50164", "CVE-2024-50298", "CVE-2024-53124", "CVE-2024-53170", "CVE-2024-54458", "CVE-2024-56631", "CVE-2024-56703", "CVE-2024-56719", "CVE-2024-57917", "CVE-2024-57924", "CVE-2024-57973", "CVE-2024-57977", "CVE-2024-57979", "CVE-2024-58011", "CVE-2024-58016", "CVE-2024-58020", "CVE-2024-58056", "CVE-2024-58058", "CVE-2024-58061", "CVE-2024-58086", "CVE-2025-21645", "CVE-2025-21648", "CVE-2025-21655", "CVE-2025-21676", "CVE-2025-21682", "CVE-2025-21702", "CVE-2025-21705", "CVE-2025-21706", "CVE-2025-21707", "CVE-2025-21718", "CVE-2025-21731", "CVE-2025-21745", "CVE-2025-21758", "CVE-2025-21760", "CVE-2025-21764", "CVE-2025-21765", "CVE-2025-21780", "CVE-2025-21795", "CVE-2025-21796", "CVE-2025-21802", "CVE-2025-21814", "CVE-2025-21846", "CVE-2025-21853", "CVE-2025-21861", "CVE-2025-21863", "CVE-2025-21864", "CVE-2025-21867", "CVE-2025-21875", "CVE-2025-21887", "CVE-2025-21913", "CVE-2025-21919", "CVE-2025-21925", "CVE-2025-21926", "CVE-2025-21938", "CVE-2025-21959", "CVE-2025-21999", "CVE-2025-22005", "CVE-2025-22015", "CVE-2025-22055", "CVE-2025-22056", "CVE-2025-22060", "CVE-2025-22083", "CVE-2025-22090", "CVE-2025-22095", "CVE-2025-22107", "CVE-2025-22111", "CVE-2025-22121", "CVE-2025-23136", "CVE-2025-23143", "CVE-2025-37785", "CVE-2025-37909", "CVE-2025-37917", "CVE-2025-37945", "CVE-2025-37959", "CVE-2025-37964", "CVE-2025-37972", "CVE-2025-37980", "CVE-2025-38125", "CVE-2025-38162", "CVE-2025-38192", "CVE-2025-38201", "CVE-2025-38232", "CVE-2025-38322", "CVE-2025-38591", "CVE-2025-38614", "CVE-2025-38681", "CVE-2025-38704", "CVE-2025-38721", "CVE-2025-38725", "CVE-2025-38727", "CVE-2025-38732", "CVE-2025-38736", "CVE-2025-39681", "CVE-2025-39691", "CVE-2025-39721", "CVE-2025-39748", "CVE-2025-39756", "CVE-2025-39764", "CVE-2025-39770", "CVE-2025-39773", "CVE-2025-39782", "CVE-2025-39795", "CVE-2025-39826", "CVE-2025-39827", "CVE-2025-39845", "CVE-2025-39866", "CVE-2025-39871", "CVE-2025-39931", "CVE-2025-39953", "CVE-2025-39955", "CVE-2025-39964", "CVE-2025-39977", "CVE-2025-39978", "CVE-2025-39980", "CVE-2025-40022", "CVE-2025-40070", "CVE-2025-40078", "CVE-2025-40080", "CVE-2025-40105", "CVE-2025-40135", "CVE-2025-40149", "CVE-2025-40196", "CVE-2025-40219", "CVE-2025-40261", "CVE-2025-40300", "CVE-2025-61984", "CVE-2025-61985", "CVE-2025-68206", "CVE-2025-68261", "CVE-2025-68264", "CVE-2025-68265", "CVE-2025-68266", "CVE-2025-68291", "CVE-2025-68337", "CVE-2025-68349", "CVE-2025-68363", "CVE-2025-68371", "CVE-2025-68724", "CVE-2025-68725", "CVE-2025-68742", "CVE-2025-68764", "CVE-2025-68773", "CVE-2025-68776", "CVE-2025-68782", "CVE-2025-68787", "CVE-2025-68788", "CVE-2025-68798", "CVE-2025-68803", "CVE-2025-68814", "CVE-2025-68816", "CVE-2025-68818", "CVE-2025-68820", "CVE-2025-71064", "CVE-2025-71075", "CVE-2025-71079", "CVE-2025-71085", "CVE-2025-71086", "CVE-2025-71088", "CVE-2025-71095", "CVE-2025-71097", "CVE-2025-71098", "CVE-2025-71104", "CVE-2025-71112", "CVE-2025-71113", "CVE-2025-71114", "CVE-2025-71120", "CVE-2025-71123", "CVE-2025-71131", "CVE-2025-71161", "CVE-2025-71162", "CVE-2025-71163", "CVE-2025-71185", "CVE-2025-71186", "CVE-2025-71189", "CVE-2025-71190", "CVE-2025-71191", "CVE-2025-71197", "CVE-2025-71221", "CVE-2025-71265", "CVE-2025-71266", "CVE-2025-71267", "CVE-2026-3497", "CVE-2026-22977", "CVE-2026-22979", "CVE-2026-22980", "CVE-2026-22982", "CVE-2026-22992", "CVE-2026-22994", "CVE-2026-23003", "CVE-2026-23005", "CVE-2026-23010", "CVE-2026-23011", "CVE-2026-23019", "CVE-2026-23026", "CVE-2026-23038", "CVE-2026-23054", "CVE-2026-23060", "CVE-2026-23083", "CVE-2026-23084", "CVE-2026-23086", "CVE-2026-23087", "CVE-2026-23095", "CVE-2026-23100", "CVE-2026-23103", "CVE-2026-23110", "CVE-2026-23111", "CVE-2026-23113", "CVE-2026-23154", "CVE-2026-23204", "CVE-2026-23231", "CVE-2026-23242", "CVE-2026-23243", "CVE-2026-23245", "CVE-2026-23255", "CVE-2026-23270", "CVE-2026-23271", "CVE-2026-23273", "CVE-2026-23274", "CVE-2026-23277", "CVE-2026-23284", "CVE-2026-23287", "CVE-2026-23290", "CVE-2026-23293", "CVE-2026-23300", "CVE-2026-23304", "CVE-2026-23319", "CVE-2026-23321", "CVE-2026-23335", "CVE-2026-23340", "CVE-2026-23343", "CVE-2026-23351", "CVE-2026-23359", "CVE-2026-23365", "CVE-2026-23368", "CVE-2026-23370", "CVE-2026-23378", "CVE-2026-23379", "CVE-2026-23381", "CVE-2026-23391", "CVE-2026-23392", "CVE-2026-23397", "CVE-2026-23398", "CVE-2026-23399", "CVE-2026-23414", "CVE-2026-23422", "CVE-2026-23434", "CVE-2026-23438", "CVE-2026-23439", "CVE-2026-23446", "CVE-2026-23449", "CVE-2026-23450", "CVE-2026-23452", "CVE-2026-23454", "CVE-2026-23455", "CVE-2026-23456", "CVE-2026-23457", "CVE-2026-23458", "CVE-2026-23463", "CVE-2026-23474", "CVE-2026-23475", "CVE-2026-27135", "CVE-2026-31389", "CVE-2026-31391", "CVE-2026-31396", "CVE-2026-31402", "CVE-2026-31403", "CVE-2026-31411", "CVE-2026-31414", "CVE-2026-31415", "CVE-2026-31416", "CVE-2026-31417", "CVE-2026-31418", "CVE-2026-31421", "CVE-2026-31422", "CVE-2026-31423", "CVE-2026-31424", "CVE-2026-31427", "CVE-2026-31428", "CVE-2026-31441", "CVE-2026-31446", "CVE-2026-31447", "CVE-2026-31448", "CVE-2026-31449", "CVE-2026-31450", "CVE-2026-31452", "CVE-2026-31466", "CVE-2026-31469", "CVE-2026-31485", "CVE-2026-31494", "CVE-2026-31495", "CVE-2026-31496", "CVE-2026-31503", "CVE-2026-31504", "CVE-2026-31507", "CVE-2026-31508", "CVE-2026-31515", "CVE-2026-31518", "CVE-2026-31521", "CVE-2026-31533", "CVE-2026-31546", "CVE-2026-31555", "CVE-2026-31563", "CVE-2026-31565", "CVE-2026-31628", "CVE-2026-31634", "CVE-2026-31649", "CVE-2026-31651", "CVE-2026-31658", "CVE-2026-31664", "CVE-2026-31665", "CVE-2026-31669", "CVE-2026-31670", "CVE-2026-31671", "CVE-2026-31674", "CVE-2026-31680", "CVE-2026-31681", "CVE-2026-31682", "CVE-2026-31700", "CVE-2026-31737", "CVE-2026-31752", "CVE-2026-31761", "CVE-2026-31768", "CVE-2026-40355", "CVE-2026-41989", "CVE-2026-43011", "CVE-2026-43024", "CVE-2026-43025", "CVE-2026-43026", "CVE-2026-43027", "CVE-2026-43028", "CVE-2026-43030", "CVE-2026-43033", "CVE-2026-43035", "CVE-2026-43038", "CVE-2026-43040", "CVE-2026-43057", "CVE-2026-43071", "CVE-2026-43085", "CVE-2026-43089", "CVE-2026-43116", "CVE-2026-43216", "CVE-2026-43303", "CVE-2026-43492", "CVE-2026-43499", "CVE-2026-43501", "CVE-2026-45841", "CVE-2026-46015", "CVE-2026-46021", "CVE-2026-46033", "CVE-2026-46037", "CVE-2026-46040", "CVE-2026-46046", "CVE-2026-46086", "CVE-2026-46101", "CVE-2026-46116", "CVE-2026-46132", "CVE-2026-46172", "CVE-2026-46173", "CVE-2026-46174", "CVE-2026-46193", "CVE-2026-46303", "CVE-2026-46306", "CVE-2026-46323", "CVE-2026-46333", "CVE-2026-52910", "CVE-2026-52912", "CVE-2026-52930", "CVE-2026-52933", "CVE-2026-52942", "CVE-2026-52943", "CVE-2026-52946", "CVE-2026-52970", "CVE-2026-52986", "CVE-2026-52998", "CVE-2026-52999", "CVE-2026-53001", "CVE-2026-53002", "CVE-2026-53006", "CVE-2026-53012", "CVE-2026-53050", "CVE-2026-53134", "CVE-2026-53218", "CVE-2026-53219", "CVE-2026-53223", "CVE-2026-53236", "CVE-2026-53239", "CVE-2026-53249", "CVE-2026-53268", "CVE-2026-53269", "CVE-2026-53275", "CVE-2026-53295", "CVE-2026-53352", "CVE-2026-53400", "CVE-2026-63810", "CVE-2026-64279", "CVE-2026-64317", "CVE-2026-64370", "CVE-2026-64371", "CVE-2026-64375", "CVE-2026-64411", "CVE-2026-64412", "CVE-2026-64413", "CVE-2026-64422", "CVE-2026-64423", "CVE-2026-64425", "CVE-2026-64538", "CVE-2026-64545", "CVE-2026-64552", "CVE-2026-64560" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "title": "Siemens RUGGEDCOM CROSSBOW | CISA", "relatedCves": [ "CVE-2026-89196", "CVE-2026-89197", "CVE-2026-89198", "CVE-2026-89199", "CVE-2026-89200", "CVE-2026-89201", "CVE-2026-89202", "CVE-2026-89203", "CVE-2026-89204", "CVE-2026-89205", "CVE-2026-89206" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "title": "Siemens WinCC | CISA", "relatedCves": [ "CVE-2026-59241" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-14", "title": "Siemens SIMATIC S7 PLCs Web Server | CISA", "relatedCves": [ "CVE-2026-63350", "CVE-2026-63351", "CVE-2026-63352", "CVE-2026-63353", "CVE-2026-63354", "CVE-2026-63355", "CVE-2026-63356", "CVE-2026-63357" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15", "title": "Siemens RUGGEDCOM CROSSBOW Station Access Controller | CISA", "relatedCves": [ "CVE-2025-6965", "CVE-2025-70873", "CVE-2025-71316", "CVE-2026-11822", "CVE-2026-11824" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-16", "title": "Siemens SIMATIC S7-1500 TM MFP | CISA", "relatedCves": [ "CVE-2023-52927", "CVE-2023-53292", "CVE-2023-54271", "CVE-2024-26982", "CVE-2024-36922", "CVE-2024-40945", "CVE-2024-47809", "CVE-2024-49998", "CVE-2024-53166", "CVE-2024-56647", "CVE-2024-56657", "CVE-2024-56719", "CVE-2024-57977", "CVE-2024-57979", "CVE-2024-57980", "CVE-2024-57981", "CVE-2024-57986", "CVE-2024-57993", "CVE-2024-57996", "CVE-2024-58002", "CVE-2024-58005", "CVE-2024-58009", "CVE-2024-58013", "CVE-2024-58014", "CVE-2024-58017", "CVE-2024-58020", "CVE-2024-58058", "CVE-2024-58061", "CVE-2024-58063", "CVE-2024-58068", "CVE-2024-58071", "CVE-2024-58072", "CVE-2024-58077", "CVE-2024-58079", "CVE-2024-58083", "CVE-2025-21682", "CVE-2025-21700", "CVE-2025-21702", "CVE-2025-21703", "CVE-2025-21704", "CVE-2025-21705", "CVE-2025-21706", "CVE-2025-21707", "CVE-2025-21708", "CVE-2025-21716", "CVE-2025-21719", "CVE-2025-21724", "CVE-2025-21725", "CVE-2025-21726", "CVE-2025-21727", "CVE-2025-21728", "CVE-2025-21731", "CVE-2025-21735", "CVE-2025-21738", "CVE-2025-21744", "CVE-2025-21745", "CVE-2025-21753", "CVE-2025-21756", "CVE-2025-21758", "CVE-2025-21760", "CVE-2025-21761", "CVE-2025-21762", "CVE-2025-21763", "CVE-2025-21764", "CVE-2025-21765", "CVE-2025-21766", "CVE-2025-21767", "CVE-2025-21776", "CVE-2025-21779", "CVE-2025-21787", "CVE-2025-21790", "CVE-2025-21791", "CVE-2025-21795", "CVE-2025-21796", "CVE-2025-21806", "CVE-2025-21814", "CVE-2025-21830", "CVE-2025-21832", "CVE-2025-21835", "CVE-2025-21838", "CVE-2025-21844", "CVE-2025-21846", "CVE-2025-21858", "CVE-2025-21859", "CVE-2025-21862", "CVE-2025-21863", "CVE-2025-21864", "CVE-2025-21865", "CVE-2025-22105", "CVE-2025-23131", "CVE-2025-38105", "CVE-2025-38162", "CVE-2025-38192", "CVE-2025-38250", "CVE-2025-38584", "CVE-2025-38704", "CVE-2025-39748", "CVE-2025-39863", "CVE-2025-39997", "CVE-2025-40135", "CVE-2025-68206", "CVE-2025-68239", "CVE-2025-68265", "CVE-2026-23066", "CVE-2026-23100", "CVE-2026-23113", "CVE-2026-23141", "CVE-2026-23154", "CVE-2026-23157", "CVE-2026-23204", "CVE-2026-23231", "CVE-2026-23245", "CVE-2026-23253", "CVE-2026-23255", "CVE-2026-23270", "CVE-2026-23271", "CVE-2026-23272", "CVE-2026-23273", "CVE-2026-23274", "CVE-2026-23277", "CVE-2026-23278", "CVE-2026-23279", "CVE-2026-23281", "CVE-2026-23290", "CVE-2026-23291", "CVE-2026-23292", "CVE-2026-23296", "CVE-2026-23300", "CVE-2026-23302", "CVE-2026-23303", "CVE-2026-23304", "CVE-2026-23310", "CVE-2026-23312", "CVE-2026-23315", "CVE-2026-23317", "CVE-2026-23318", "CVE-2026-23319", "CVE-2026-23321", "CVE-2026-23336", "CVE-2026-23339", "CVE-2026-23340", "CVE-2026-23343", "CVE-2026-23351", "CVE-2026-23352", "CVE-2026-23356", "CVE-2026-23357", "CVE-2026-23359", "CVE-2026-23364", "CVE-2026-23365", "CVE-2026-23367", "CVE-2026-23368", "CVE-2026-23370", "CVE-2026-23372", "CVE-2026-23378", "CVE-2026-23379", "CVE-2026-23381", "CVE-2026-23382", "CVE-2026-23388", "CVE-2026-23389", "CVE-2026-23391", "CVE-2026-23392", "CVE-2026-23395", "CVE-2026-23396", "CVE-2026-23397", "CVE-2026-23398", "CVE-2026-23399", "CVE-2026-23442", "CVE-2026-23444", "CVE-2026-31407", "CVE-2026-31449", "CVE-2026-31451", "CVE-2026-31488", "CVE-2026-31500", "CVE-2026-31532", "CVE-2026-31580", "CVE-2026-31583", "CVE-2026-31586", "CVE-2026-31611", "CVE-2026-31612", "CVE-2026-31613", "CVE-2026-31617", "CVE-2026-31622", "CVE-2026-31624", "CVE-2026-31625", "CVE-2026-31629", "CVE-2026-31630", "CVE-2026-31637", "CVE-2026-31642", "CVE-2026-31673", "CVE-2026-31676", "CVE-2026-31681", "CVE-2026-31685", "CVE-2026-31694", "CVE-2026-31696", "CVE-2026-31697", "CVE-2026-31698", "CVE-2026-31699", "CVE-2026-31700", "CVE-2026-31704", "CVE-2026-31705", "CVE-2026-31708", "CVE-2026-31709", "CVE-2026-31711", "CVE-2026-31712", "CVE-2026-43052", "CVE-2026-43071", "CVE-2026-43074", "CVE-2026-43080", "CVE-2026-43085", "CVE-2026-43089", "CVE-2026-43093", "CVE-2026-43094", "CVE-2026-43099", "CVE-2026-43110", "CVE-2026-43111", "CVE-2026-43112", "CVE-2026-43114", "CVE-2026-43116", "CVE-2026-43117", "CVE-2026-43303", "CVE-2026-43350", "CVE-2026-43421", "CVE-2026-43492", "CVE-2026-43493", "CVE-2026-43496", "CVE-2026-43499", "CVE-2026-43502", "CVE-2026-43503", "CVE-2026-45834", "CVE-2026-45835", "CVE-2026-45836", "CVE-2026-45838", "CVE-2026-45839", "CVE-2026-45840", "CVE-2026-45841", "CVE-2026-45842", "CVE-2026-45843", "CVE-2026-45844", "CVE-2026-45850", "CVE-2026-45991", "CVE-2026-45997", "CVE-2026-46003", "CVE-2026-46015", "CVE-2026-46018", "CVE-2026-46021", "CVE-2026-46022", "CVE-2026-46023", "CVE-2026-46026", "CVE-2026-46033", "CVE-2026-46037", "CVE-2026-46038", "CVE-2026-46040", "CVE-2026-46044", "CVE-2026-46046", "CVE-2026-46047", "CVE-2026-46050", "CVE-2026-46051", "CVE-2026-46056", "CVE-2026-46064", "CVE-2026-46065", "CVE-2026-46069", "CVE-2026-46070", "CVE-2026-46083", "CVE-2026-46086", "CVE-2026-46088", "CVE-2026-46092", "CVE-2026-46099", "CVE-2026-46101", "CVE-2026-46102", "CVE-2026-46107", "CVE-2026-46110", "CVE-2026-46113", "CVE-2026-46116", "CVE-2026-46120", "CVE-2026-46122", "CVE-2026-46124", "CVE-2026-46125", "CVE-2026-46128", "CVE-2026-46136", "CVE-2026-46137", "CVE-2026-46146", "CVE-2026-46149", "CVE-2026-46150", "CVE-2026-46151", "CVE-2026-46159", "CVE-2026-46161", "CVE-2026-46163", "CVE-2026-46165", "CVE-2026-46167", "CVE-2026-46168", "CVE-2026-46172", "CVE-2026-46173", "CVE-2026-46177", "CVE-2026-46180", "CVE-2026-46185", "CVE-2026-46187", "CVE-2026-46190", "CVE-2026-46191", "CVE-2026-46193", "CVE-2026-46195", "CVE-2026-46196", "CVE-2026-46209", "CVE-2026-46214", "CVE-2026-46227", "CVE-2026-46234", "CVE-2026-46243", "CVE-2026-46275", "CVE-2026-46294", "CVE-2026-46303", "CVE-2026-46304", "CVE-2026-46306", "CVE-2026-46307", "CVE-2026-46320", "CVE-2026-46321", "CVE-2026-46322", "CVE-2026-46323", "CVE-2026-46331", "CVE-2026-52909", "CVE-2026-52910", "CVE-2026-52917", "CVE-2026-52918", "CVE-2026-52923", "CVE-2026-52928", "CVE-2026-52929", "CVE-2026-52930", "CVE-2026-52942", "CVE-2026-52943", "CVE-2026-52946", "CVE-2026-52947", "CVE-2026-52948", "CVE-2026-53080", "CVE-2026-53131", "CVE-2026-53146", "CVE-2026-53147", "CVE-2026-53148", "CVE-2026-53149", "CVE-2026-53150", "CVE-2026-53167", "CVE-2026-53168", "CVE-2026-53177", "CVE-2026-53181", "CVE-2026-53183", "CVE-2026-53184", "CVE-2026-53192", "CVE-2026-53198", "CVE-2026-53208", "CVE-2026-53212", "CVE-2026-53218", "CVE-2026-53219", "CVE-2026-53221", "CVE-2026-53225", "CVE-2026-53227", "CVE-2026-53228", "CVE-2026-53236", "CVE-2026-53239", "CVE-2026-53242", "CVE-2026-53245", "CVE-2026-53249", "CVE-2026-53253", "CVE-2026-53254", "CVE-2026-53255", "CVE-2026-53256", "CVE-2026-53263", "CVE-2026-53264", "CVE-2026-53265", "CVE-2026-53268", "CVE-2026-53269", "CVE-2026-53275", "CVE-2026-53325", "CVE-2026-53337", "CVE-2026-53349", "CVE-2026-53350", "CVE-2026-53352", "CVE-2026-53356", "CVE-2026-53358", "CVE-2026-53362", "CVE-2026-64560" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17", "title": "Siemens Industrial Edge Devices | CISA", "relatedCves": [ "CVE-2026-44414", "CVE-2026-44415" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18", "title": "Siemens RUGGEDCOM APE1808 Devices | CISA", "relatedCves": [ "CVE-2026-33387", "CVE-2026-33388", "CVE-2026-33389", "CVE-2026-33391", "CVE-2026-33920" ] }, { "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01", "title": "InterSystems Corporation InterSystems IRIS for Health | CISA", "relatedCves": [ "CVE-2026-111594" ] } ], "relatedDocuments": [ { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06", "title": "Meari IoT Cloud Platform OpenAPI Service (Update A) | CISA", "relatedCves": [ "CVE-2026-101104", "CVE-2026-96613" ], "truncated": false }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "title": "Kiloview E3 NDI Encoder | CISA", "relatedCves": [ "CVE-2026-109122", "CVE-2026-111100", "CVE-2026-96616", "CVE-2026-105265", "CVE-2026-110491", "CVE-2026-107861", "CVE-2026-110243", "CVE-2026-92450", "CVE-2026-110825" ], "truncated": false }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "title": "Siemens Industrial Edge App Publisher | CISA", "relatedCves": [ "CVE-2026-78556", "CVE-2026-78557" ], "truncated": false }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03", "title": "Siemens Software Center | CISA", "relatedCves": [ "CVE-2026-110936" ], "truncated": false }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "title": "Siemens Capital Embedded AR Classic | CISA", "relatedCves": [ "CVE-2026-89208" ], "truncated": false }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-05", "title": "Siemens SENTRON 3NA COM Fuse | CISA", "relatedCves": [ "CVE-2024-7322" ], "truncated": false }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06", "title": "Siemens PSS(R)SINCAL | CISA", "relatedCves": [ "CVE-2026-84854" ], "truncated": false }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-07", "title": "Siemens SIMATIC IPCs | CISA", "relatedCves": [ "CVE-2026-72895" ], "truncated": false }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08", "title": "Siemens APOGEE, TALON and Desigo PXC/PXM Products | CISA", "relatedCves": [ "CVE-2026-102073", "CVE-2026-102074", "CVE-2026-102075", "CVE-2026-102076", "CVE-2026-89208" ], "truncated": true }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "title": "Siemens Industrial Edge Device Kit | CISA", "relatedCves": [ "CVE-2026-44414", "CVE-2026-44415" ], "truncated": true }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10", "title": "Siemens SIMATIC S7 Webserver API | CISA", "relatedCves": [ "CVE-2026-85114", "CVE-2026-85115" ], "truncated": false }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "title": "Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP | CISA", "relatedCves": [ "CVE-2021-41617", "CVE-2023-28531", "CVE-2023-51384", "CVE-2023-52927", "CVE-2023-53292", "CVE-2024-26783", "CVE-2024-27056", "CVE-2024-28956", "CVE-2024-36903", "CVE-2024-36927", "CVE-2024-42079", "CVE-2024-46786", "CVE-2024-47736", "CVE-2024-47809", "CVE-2024-49968", "CVE-2024-49994", "CVE-2024-49998", "CVE-2024-50014", "CVE-2024-50063", "CVE-2024-50164", "CVE-2024-50298", "CVE-2024-53124", "CVE-2024-53170", "CVE-2024-54458", "CVE-2024-56631", "CVE-2024-56703", "CVE-2024-56719", "CVE-2024-57917", "CVE-2024-57924", "CVE-2024-57973", "CVE-2024-57977", "CVE-2024-57979", "CVE-2024-58011", "CVE-2024-58016", "CVE-2024-58020", "CVE-2024-58056", "CVE-2024-58058", "CVE-2024-58061", "CVE-2024-58086", "CVE-2025-21645", "CVE-2025-21648", "CVE-2025-21655", "CVE-2025-21676", "CVE-2025-21682", "CVE-2025-21702", "CVE-2025-21705", "CVE-2025-21706", "CVE-2025-21707", "CVE-2025-21718", "CVE-2025-21731", "CVE-2025-21745", "CVE-2025-21758", "CVE-2025-21760", "CVE-2025-21764", "CVE-2025-21765", "CVE-2025-21780", "CVE-2025-21795", "CVE-2025-21796", "CVE-2025-21802", "CVE-2025-21814", "CVE-2025-21846", "CVE-2025-21853", "CVE-2025-21861", "CVE-2025-21863", "CVE-2025-21864", "CVE-2025-21867", "CVE-2025-21875", "CVE-2025-21887", "CVE-2025-21913", "CVE-2025-21919", "CVE-2025-21925", "CVE-2025-21926", "CVE-2025-21938", "CVE-2025-21959", "CVE-2025-21999", "CVE-2025-22005", "CVE-2025-22015", "CVE-2025-22055", "CVE-2025-22056", "CVE-2025-22060", "CVE-2025-22083", "CVE-2025-22090", "CVE-2025-22095", "CVE-2025-22107", "CVE-2025-22111", "CVE-2025-22121", "CVE-2025-23136", "CVE-2025-23143", "CVE-2025-37785", "CVE-2025-37909", "CVE-2025-37917", "CVE-2025-37945", "CVE-2025-37959", "CVE-2025-37964", "CVE-2025-37972", "CVE-2025-37980", "CVE-2025-38125", "CVE-2025-38162", "CVE-2025-38192", "CVE-2025-38201", "CVE-2025-38232", "CVE-2025-38322", "CVE-2025-38591", "CVE-2025-38614", "CVE-2025-38681", "CVE-2025-38704", "CVE-2025-38721", "CVE-2025-38725", "CVE-2025-38727", "CVE-2025-38732", "CVE-2025-38736", "CVE-2025-39681", "CVE-2025-39691", "CVE-2025-39721", "CVE-2025-39748", "CVE-2025-39756", "CVE-2025-39764", "CVE-2025-39770", "CVE-2025-39773", "CVE-2025-39782", "CVE-2025-39795", "CVE-2025-39826", "CVE-2025-39827", "CVE-2025-39845", "CVE-2025-39866", "CVE-2025-39871", "CVE-2025-39931", "CVE-2025-39953", "CVE-2025-39955", "CVE-2025-39964", "CVE-2025-39977", "CVE-2025-39978", "CVE-2025-39980", "CVE-2025-40022", "CVE-2025-40070", "CVE-2025-40078", "CVE-2025-40080", "CVE-2025-40105", "CVE-2025-40135", "CVE-2025-40149", "CVE-2025-40196", "CVE-2025-40219", "CVE-2025-40261", "CVE-2025-40300", "CVE-2025-61984", "CVE-2025-61985", "CVE-2025-68206", "CVE-2025-68261", "CVE-2025-68264", "CVE-2025-68265", "CVE-2025-68266", "CVE-2025-68291", "CVE-2025-68337", "CVE-2025-68349", "CVE-2025-68363", "CVE-2025-68371", "CVE-2025-68724", "CVE-2025-68725", "CVE-2025-68742", "CVE-2025-68764", "CVE-2025-68773", "CVE-2025-68776", "CVE-2025-68782", "CVE-2025-68787", "CVE-2025-68788", "CVE-2025-68798", "CVE-2025-68803", "CVE-2025-68814", "CVE-2025-68816", "CVE-2025-68818", "CVE-2025-68820", "CVE-2025-71064", "CVE-2025-71075", "CVE-2025-71079", "CVE-2025-71085", "CVE-2025-71086", "CVE-2025-71088", "CVE-2025-71095", "CVE-2025-71097", "CVE-2025-71098", "CVE-2025-71104", "CVE-2025-71112", "CVE-2025-71113", "CVE-2025-71114", "CVE-2025-71120", "CVE-2025-71123", "CVE-2025-71131", "CVE-2025-71161", "CVE-2025-71162", "CVE-2025-71163", "CVE-2025-71185", "CVE-2025-71186", "CVE-2025-71189", "CVE-2025-71190", "CVE-2025-71191", "CVE-2025-71197", "CVE-2025-71221", "CVE-2025-71265", "CVE-2025-71266", "CVE-2025-71267", "CVE-2026-3497", "CVE-2026-22977", "CVE-2026-22979", "CVE-2026-22980", "CVE-2026-22982", "CVE-2026-22992", "CVE-2026-22994", "CVE-2026-23003", "CVE-2026-23005", "CVE-2026-23010", "CVE-2026-23011", "CVE-2026-23019", "CVE-2026-23026", "CVE-2026-23038", "CVE-2026-23054", "CVE-2026-23060", "CVE-2026-23083", "CVE-2026-23084", "CVE-2026-23086", "CVE-2026-23087", "CVE-2026-23095", "CVE-2026-23100", "CVE-2026-23103", "CVE-2026-23110", "CVE-2026-23111", "CVE-2026-23113", "CVE-2026-23154", "CVE-2026-23204", "CVE-2026-23231", "CVE-2026-23242", "CVE-2026-23243", "CVE-2026-23245", "CVE-2026-23255", "CVE-2026-23270", "CVE-2026-23271", "CVE-2026-23273", "CVE-2026-23274", "CVE-2026-23277", "CVE-2026-23284", "CVE-2026-23287", "CVE-2026-23290", "CVE-2026-23293", "CVE-2026-23300", "CVE-2026-23304", "CVE-2026-23319", "CVE-2026-23321", "CVE-2026-23335", "CVE-2026-23340", "CVE-2026-23343", "CVE-2026-23351", "CVE-2026-23359", "CVE-2026-23365", "CVE-2026-23368", "CVE-2026-23370", "CVE-2026-23378", "CVE-2026-23379", "CVE-2026-23381", "CVE-2026-23391", "CVE-2026-23392", "CVE-2026-23397", "CVE-2026-23398", "CVE-2026-23399", "CVE-2026-23414", "CVE-2026-23422", "CVE-2026-23434", "CVE-2026-23438", "CVE-2026-23439", "CVE-2026-23446", "CVE-2026-23449", "CVE-2026-23450", "CVE-2026-23452", "CVE-2026-23454", "CVE-2026-23455", "CVE-2026-23456", "CVE-2026-23457", "CVE-2026-23458", "CVE-2026-23463", "CVE-2026-23474", "CVE-2026-23475", "CVE-2026-27135", "CVE-2026-31389", "CVE-2026-31391", "CVE-2026-31396", "CVE-2026-31402", "CVE-2026-31403", "CVE-2026-31411", "CVE-2026-31414", "CVE-2026-31415", "CVE-2026-31416", "CVE-2026-31417", "CVE-2026-31418", "CVE-2026-31421", "CVE-2026-31422", "CVE-2026-31423", "CVE-2026-31424", "CVE-2026-31427", "CVE-2026-31428", "CVE-2026-31441", "CVE-2026-31446", "CVE-2026-31447", "CVE-2026-31448", "CVE-2026-31449", "CVE-2026-31450", "CVE-2026-31452", "CVE-2026-31466", "CVE-2026-31469", "CVE-2026-31485", "CVE-2026-31494", "CVE-2026-31495", "CVE-2026-31496", "CVE-2026-31503", "CVE-2026-31504", "CVE-2026-31507", "CVE-2026-31508", "CVE-2026-31515", "CVE-2026-31518", "CVE-2026-31521", "CVE-2026-31533", "CVE-2026-31546", "CVE-2026-31555", "CVE-2026-31563", "CVE-2026-31565", "CVE-2026-31628", "CVE-2026-31634", "CVE-2026-31649", "CVE-2026-31651", "CVE-2026-31658", "CVE-2026-31664", "CVE-2026-31665", "CVE-2026-31669", "CVE-2026-31670", "CVE-2026-31671", "CVE-2026-31674", "CVE-2026-31680", "CVE-2026-31681", "CVE-2026-31682", "CVE-2026-31700", "CVE-2026-31737", "CVE-2026-31752", "CVE-2026-31761", "CVE-2026-31768", "CVE-2026-40355", "CVE-2026-41989", "CVE-2026-43011", "CVE-2026-43024", "CVE-2026-43025", "CVE-2026-43026", "CVE-2026-43027", "CVE-2026-43028", "CVE-2026-43030", "CVE-2026-43033", "CVE-2026-43035", "CVE-2026-43038", "CVE-2026-43040", "CVE-2026-43057", "CVE-2026-43071", "CVE-2026-43085", "CVE-2026-43089", "CVE-2026-43116", "CVE-2026-43216", "CVE-2026-43303", "CVE-2026-43492", "CVE-2026-43499", "CVE-2026-43501", "CVE-2026-45841", "CVE-2026-46015", "CVE-2026-46021", "CVE-2026-46033", "CVE-2026-46037", "CVE-2026-46040", "CVE-2026-46046", "CVE-2026-46086", "CVE-2026-46101", "CVE-2026-46116", "CVE-2026-46132", "CVE-2026-46172", "CVE-2026-46173", "CVE-2026-46174", "CVE-2026-46193", "CVE-2026-46303", "CVE-2026-46306", "CVE-2026-46323", "CVE-2026-46333", "CVE-2026-52910", "CVE-2026-52912", "CVE-2026-52930", "CVE-2026-52933", "CVE-2026-52942", "CVE-2026-52943", "CVE-2026-52946", "CVE-2026-52970", "CVE-2026-52986", "CVE-2026-52998", "CVE-2026-52999", "CVE-2026-53001", "CVE-2026-53002", "CVE-2026-53006", "CVE-2026-53012", "CVE-2026-53050", "CVE-2026-53134", "CVE-2026-53218", "CVE-2026-53219", "CVE-2026-53223", "CVE-2026-53236", "CVE-2026-53239", "CVE-2026-53249", "CVE-2026-53268", "CVE-2026-53269", "CVE-2026-53275", "CVE-2026-53295", "CVE-2026-53352", "CVE-2026-53400", "CVE-2026-63810", "CVE-2026-64279", "CVE-2026-64317", "CVE-2026-64370", "CVE-2026-64371", "CVE-2026-64375", "CVE-2026-64411", "CVE-2026-64412", "CVE-2026-64413", "CVE-2026-64422", "CVE-2026-64423", "CVE-2026-64425", "CVE-2026-64538", "CVE-2026-64545", "CVE-2026-64552", "CVE-2026-64560" ], "truncated": false }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "title": "Siemens RUGGEDCOM CROSSBOW | CISA", "relatedCves": [ "CVE-2026-89196", "CVE-2026-89197", "CVE-2026-89198", "CVE-2026-89199", "CVE-2026-89200", "CVE-2026-89201", "CVE-2026-89202", "CVE-2026-89203", "CVE-2026-89204", "CVE-2026-89205", "CVE-2026-89206" ], "truncated": false }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "title": "Siemens WinCC | CISA", "relatedCves": [ "CVE-2026-59241" ], "truncated": false }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-14", "title": "Siemens SIMATIC S7 PLCs Web Server | CISA", "relatedCves": [ "CVE-2026-63350", "CVE-2026-63351", "CVE-2026-63352", "CVE-2026-63353", "CVE-2026-63354", "CVE-2026-63355", "CVE-2026-63356", "CVE-2026-63357" ], "truncated": true }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15", "title": "Siemens RUGGEDCOM CROSSBOW Station Access Controller | CISA", "relatedCves": [ "CVE-2025-6965", "CVE-2025-70873", "CVE-2025-71316", "CVE-2026-11822", "CVE-2026-11824" ], "truncated": false }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-16", "title": "Siemens SIMATIC S7-1500 TM MFP | CISA", "relatedCves": [ "CVE-2023-52927", "CVE-2023-53292", "CVE-2023-54271", "CVE-2024-26982", "CVE-2024-36922", "CVE-2024-40945", "CVE-2024-47809", "CVE-2024-49998", "CVE-2024-53166", "CVE-2024-56647", "CVE-2024-56657", "CVE-2024-56719", "CVE-2024-57977", "CVE-2024-57979", "CVE-2024-57980", "CVE-2024-57981", "CVE-2024-57986", "CVE-2024-57993", "CVE-2024-57996", "CVE-2024-58002", "CVE-2024-58005", "CVE-2024-58009", "CVE-2024-58013", "CVE-2024-58014", "CVE-2024-58017", "CVE-2024-58020", "CVE-2024-58058", "CVE-2024-58061", "CVE-2024-58063", "CVE-2024-58068", "CVE-2024-58071", "CVE-2024-58072", "CVE-2024-58077", "CVE-2024-58079", "CVE-2024-58083", "CVE-2025-21682", "CVE-2025-21700", "CVE-2025-21702", "CVE-2025-21703", "CVE-2025-21704", "CVE-2025-21705", "CVE-2025-21706", "CVE-2025-21707", "CVE-2025-21708", "CVE-2025-21716", "CVE-2025-21719", "CVE-2025-21724", "CVE-2025-21725", "CVE-2025-21726", "CVE-2025-21727", "CVE-2025-21728", "CVE-2025-21731", "CVE-2025-21735", "CVE-2025-21738", "CVE-2025-21744", "CVE-2025-21745", "CVE-2025-21753", "CVE-2025-21756", "CVE-2025-21758", "CVE-2025-21760", "CVE-2025-21761", "CVE-2025-21762", "CVE-2025-21763", "CVE-2025-21764", "CVE-2025-21765", "CVE-2025-21766", "CVE-2025-21767", "CVE-2025-21776", "CVE-2025-21779", "CVE-2025-21787", "CVE-2025-21790", "CVE-2025-21791", "CVE-2025-21795", "CVE-2025-21796", "CVE-2025-21806", "CVE-2025-21814", "CVE-2025-21830", "CVE-2025-21832", "CVE-2025-21835", "CVE-2025-21838", "CVE-2025-21844", "CVE-2025-21846", "CVE-2025-21858", "CVE-2025-21859", "CVE-2025-21862", "CVE-2025-21863", "CVE-2025-21864", "CVE-2025-21865", "CVE-2025-22105", "CVE-2025-23131", "CVE-2025-38105", "CVE-2025-38162", "CVE-2025-38192", "CVE-2025-38250", "CVE-2025-38584", "CVE-2025-38704", "CVE-2025-39748", "CVE-2025-39863", "CVE-2025-39997", "CVE-2025-40135", "CVE-2025-68206", "CVE-2025-68239", "CVE-2025-68265", "CVE-2026-23066", "CVE-2026-23100", "CVE-2026-23113", "CVE-2026-23141", "CVE-2026-23154", "CVE-2026-23157", "CVE-2026-23204", "CVE-2026-23231", "CVE-2026-23245", "CVE-2026-23253", "CVE-2026-23255", "CVE-2026-23270", "CVE-2026-23271", "CVE-2026-23272", "CVE-2026-23273", "CVE-2026-23274", "CVE-2026-23277", "CVE-2026-23278", "CVE-2026-23279", "CVE-2026-23281", "CVE-2026-23290", "CVE-2026-23291", "CVE-2026-23292", "CVE-2026-23296", "CVE-2026-23300", "CVE-2026-23302", "CVE-2026-23303", "CVE-2026-23304", "CVE-2026-23310", "CVE-2026-23312", "CVE-2026-23315", "CVE-2026-23317", "CVE-2026-23318", "CVE-2026-23319", "CVE-2026-23321", "CVE-2026-23336", "CVE-2026-23339", "CVE-2026-23340", "CVE-2026-23343", "CVE-2026-23351", "CVE-2026-23352", "CVE-2026-23356", "CVE-2026-23357", "CVE-2026-23359", "CVE-2026-23364", "CVE-2026-23365", "CVE-2026-23367", "CVE-2026-23368", "CVE-2026-23370", "CVE-2026-23372", "CVE-2026-23378", "CVE-2026-23379", "CVE-2026-23381", "CVE-2026-23382", "CVE-2026-23388", "CVE-2026-23389", "CVE-2026-23391", "CVE-2026-23392", "CVE-2026-23395", "CVE-2026-23396", "CVE-2026-23397", "CVE-2026-23398", "CVE-2026-23399", "CVE-2026-23442", "CVE-2026-23444", "CVE-2026-31407", "CVE-2026-31449", "CVE-2026-31451", "CVE-2026-31488", "CVE-2026-31500", "CVE-2026-31532", "CVE-2026-31580", "CVE-2026-31583", "CVE-2026-31586", "CVE-2026-31611", "CVE-2026-31612", "CVE-2026-31613", "CVE-2026-31617", "CVE-2026-31622", "CVE-2026-31624", "CVE-2026-31625", "CVE-2026-31629", "CVE-2026-31630", "CVE-2026-31637", "CVE-2026-31642", "CVE-2026-31673", "CVE-2026-31676", "CVE-2026-31681", "CVE-2026-31685", "CVE-2026-31694", "CVE-2026-31696", "CVE-2026-31697", "CVE-2026-31698", "CVE-2026-31699", "CVE-2026-31700", "CVE-2026-31704", "CVE-2026-31705", "CVE-2026-31708", "CVE-2026-31709", "CVE-2026-31711", "CVE-2026-31712", "CVE-2026-43052", "CVE-2026-43071", "CVE-2026-43074", "CVE-2026-43080", "CVE-2026-43085", "CVE-2026-43089", "CVE-2026-43093", "CVE-2026-43094", "CVE-2026-43099", "CVE-2026-43110", "CVE-2026-43111", "CVE-2026-43112", "CVE-2026-43114", "CVE-2026-43116", "CVE-2026-43117", "CVE-2026-43303", "CVE-2026-43350", "CVE-2026-43421", "CVE-2026-43492", "CVE-2026-43493", "CVE-2026-43496", "CVE-2026-43499", "CVE-2026-43502", "CVE-2026-43503", "CVE-2026-45834", "CVE-2026-45835", "CVE-2026-45836", "CVE-2026-45838", "CVE-2026-45839", "CVE-2026-45840", "CVE-2026-45841", "CVE-2026-45842", "CVE-2026-45843", "CVE-2026-45844", "CVE-2026-45850", "CVE-2026-45991", "CVE-2026-45997", "CVE-2026-46003", "CVE-2026-46015", "CVE-2026-46018", "CVE-2026-46021", "CVE-2026-46022", "CVE-2026-46023", "CVE-2026-46026", "CVE-2026-46033", "CVE-2026-46037", "CVE-2026-46038", "CVE-2026-46040", "CVE-2026-46044", "CVE-2026-46046", "CVE-2026-46047", "CVE-2026-46050", "CVE-2026-46051", "CVE-2026-46056", "CVE-2026-46064", "CVE-2026-46065", "CVE-2026-46069", "CVE-2026-46070", "CVE-2026-46083", "CVE-2026-46086", "CVE-2026-46088", "CVE-2026-46092", "CVE-2026-46099", "CVE-2026-46101", "CVE-2026-46102", "CVE-2026-46107", "CVE-2026-46110", "CVE-2026-46113", "CVE-2026-46116", "CVE-2026-46120", "CVE-2026-46122", "CVE-2026-46124", "CVE-2026-46125", "CVE-2026-46128", "CVE-2026-46136", "CVE-2026-46137", "CVE-2026-46146", "CVE-2026-46149", "CVE-2026-46150", "CVE-2026-46151", "CVE-2026-46159", "CVE-2026-46161", "CVE-2026-46163", "CVE-2026-46165", "CVE-2026-46167", "CVE-2026-46168", "CVE-2026-46172", "CVE-2026-46173", "CVE-2026-46177", "CVE-2026-46180", "CVE-2026-46185", "CVE-2026-46187", "CVE-2026-46190", "CVE-2026-46191", "CVE-2026-46193", "CVE-2026-46195", "CVE-2026-46196", "CVE-2026-46209", "CVE-2026-46214", "CVE-2026-46227", "CVE-2026-46234", "CVE-2026-46243", "CVE-2026-46275", "CVE-2026-46294", "CVE-2026-46303", "CVE-2026-46304", "CVE-2026-46306", "CVE-2026-46307", "CVE-2026-46320", "CVE-2026-46321", "CVE-2026-46322", "CVE-2026-46323", "CVE-2026-46331", "CVE-2026-52909", "CVE-2026-52910", "CVE-2026-52917", "CVE-2026-52918", "CVE-2026-52923", "CVE-2026-52928", "CVE-2026-52929", "CVE-2026-52930", "CVE-2026-52942", "CVE-2026-52943", "CVE-2026-52946", "CVE-2026-52947", "CVE-2026-52948", "CVE-2026-53080", "CVE-2026-53131", "CVE-2026-53146", "CVE-2026-53147", "CVE-2026-53148", "CVE-2026-53149", "CVE-2026-53150", "CVE-2026-53167", "CVE-2026-53168", "CVE-2026-53177", "CVE-2026-53181", "CVE-2026-53183", "CVE-2026-53184", "CVE-2026-53192", "CVE-2026-53198", "CVE-2026-53208", "CVE-2026-53212", "CVE-2026-53218", "CVE-2026-53219", "CVE-2026-53221", "CVE-2026-53225", "CVE-2026-53227", "CVE-2026-53228", "CVE-2026-53236", "CVE-2026-53239", "CVE-2026-53242", "CVE-2026-53245", "CVE-2026-53249", "CVE-2026-53253", "CVE-2026-53254", "CVE-2026-53255", "CVE-2026-53256", "CVE-2026-53263", "CVE-2026-53264", "CVE-2026-53265", "CVE-2026-53268", "CVE-2026-53269", "CVE-2026-53275", "CVE-2026-53325", "CVE-2026-53337", "CVE-2026-53349", "CVE-2026-53350", "CVE-2026-53352", "CVE-2026-53356", "CVE-2026-53358", "CVE-2026-53362", "CVE-2026-64560" ], "truncated": false }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17", "title": "Siemens Industrial Edge Devices | CISA", "relatedCves": [ "CVE-2026-44414", "CVE-2026-44415" ], "truncated": true }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18", "title": "Siemens RUGGEDCOM APE1808 Devices | CISA", "relatedCves": [ "CVE-2026-33387", "CVE-2026-33388", "CVE-2026-33389", "CVE-2026-33391", "CVE-2026-33920" ], "truncated": false }, { "type": "html", "sourceType": "CISA ICS", "sourceUrl": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01", "title": "InterSystems Corporation InterSystems IRIS for Health | CISA", "relatedCves": [ "CVE-2026-111594" ], "truncated": false } ] }, "relatedCves": [ "CVE-2026-101104", "CVE-2026-96613", "CVE-2026-109122", "CVE-2026-111100", "CVE-2026-96616", "CVE-2026-105265", "CVE-2026-110491", "CVE-2026-107861", "CVE-2026-110243", "CVE-2026-92450", "CVE-2026-110825", "CVE-2026-78556", "CVE-2026-78557", "CVE-2026-110936", "CVE-2026-89208", "CVE-2024-7322", "CVE-2026-84854", "CVE-2026-72895", "CVE-2026-102073", "CVE-2026-102074", "CVE-2026-102075", "CVE-2026-102076", "CVE-2026-44414", "CVE-2026-44415", "CVE-2026-85114", "CVE-2026-85115", "CVE-2021-41617", "CVE-2023-28531", "CVE-2023-51384", "CVE-2023-52927", "CVE-2023-53292", "CVE-2024-26783", "CVE-2024-27056", "CVE-2024-28956", "CVE-2024-36903", "CVE-2024-36927", "CVE-2024-42079", "CVE-2024-46786", "CVE-2024-47736", "CVE-2024-47809", "CVE-2024-49968", "CVE-2024-49994", "CVE-2024-49998", "CVE-2024-50014", "CVE-2024-50063", "CVE-2024-50164", "CVE-2024-50298", "CVE-2024-53124", "CVE-2024-53170", "CVE-2024-54458", "CVE-2024-56631", "CVE-2024-56703", "CVE-2024-56719", "CVE-2024-57917", "CVE-2024-57924", "CVE-2024-57973", "CVE-2024-57977", "CVE-2024-57979", "CVE-2024-58011", "CVE-2024-58016", "CVE-2024-58020", "CVE-2024-58056", "CVE-2024-58058", "CVE-2024-58061", "CVE-2024-58086", "CVE-2025-21645", "CVE-2025-21648", "CVE-2025-21655", "CVE-2025-21676", "CVE-2025-21682", "CVE-2025-21702", "CVE-2025-21705", "CVE-2025-21706", "CVE-2025-21707", "CVE-2025-21718", "CVE-2025-21731", "CVE-2025-21745", "CVE-2025-21758", "CVE-2025-21760", "CVE-2025-21764", "CVE-2025-21765", "CVE-2025-21780", "CVE-2025-21795", "CVE-2025-21796", "CVE-2025-21802", "CVE-2025-21814", "CVE-2025-21846", "CVE-2025-21853", "CVE-2025-21861", "CVE-2025-21863", "CVE-2025-21864", "CVE-2025-21867", "CVE-2025-21875", "CVE-2025-21887", "CVE-2025-21913", "CVE-2025-21919", "CVE-2025-21925", "CVE-2025-21926", "CVE-2025-21938", "CVE-2025-21959", "CVE-2025-21999", "CVE-2025-22005", "CVE-2025-22015", "CVE-2025-22055", "CVE-2025-22056", "CVE-2025-22060", "CVE-2025-22083", "CVE-2025-22090", "CVE-2025-22095", "CVE-2025-22107", "CVE-2025-22111", "CVE-2025-22121", "CVE-2025-23136", "CVE-2025-23143", "CVE-2025-37785", "CVE-2025-37909", "CVE-2025-37917", "CVE-2025-37945", "CVE-2025-37959", "CVE-2025-37964", "CVE-2025-37972", "CVE-2025-37980", "CVE-2025-38125", "CVE-2025-38162", "CVE-2025-38192", "CVE-2025-38201", "CVE-2025-38232", "CVE-2025-38322", "CVE-2025-38591", "CVE-2025-38614", "CVE-2025-38681", "CVE-2025-38704", "CVE-2025-38721", "CVE-2025-38725", "CVE-2025-38727", "CVE-2025-38732", "CVE-2025-38736", "CVE-2025-39681", "CVE-2025-39691", "CVE-2025-39721", "CVE-2025-39748", "CVE-2025-39756", "CVE-2025-39764", "CVE-2025-39770", "CVE-2025-39773", "CVE-2025-39782", "CVE-2025-39795", "CVE-2025-39826", "CVE-2025-39827", "CVE-2025-39845", "CVE-2025-39866", "CVE-2025-39871", "CVE-2025-39931", "CVE-2025-39953", "CVE-2025-39955", "CVE-2025-39964", "CVE-2025-39977", "CVE-2025-39978", "CVE-2025-39980", "CVE-2025-40022", "CVE-2025-40070", "CVE-2025-40078", "CVE-2025-40080", "CVE-2025-40105", "CVE-2025-40135", "CVE-2025-40149", "CVE-2025-40196", "CVE-2025-40219", "CVE-2025-40261", "CVE-2025-40300", "CVE-2025-61984", "CVE-2025-61985", "CVE-2025-68206", "CVE-2025-68261", "CVE-2025-68264", "CVE-2025-68265", "CVE-2025-68266", "CVE-2025-68291", "CVE-2025-68337", "CVE-2025-68349", "CVE-2025-68363", "CVE-2025-68371", "CVE-2025-68724", "CVE-2025-68725", "CVE-2025-68742", "CVE-2025-68764", "CVE-2025-68773", "CVE-2025-68776", "CVE-2025-68782", "CVE-2025-68787", "CVE-2025-68788", "CVE-2025-68798", "CVE-2025-68803", "CVE-2025-68814", "CVE-2025-68816", "CVE-2025-68818", "CVE-2025-68820", "CVE-2025-71064", "CVE-2025-71075", "CVE-2025-71079", "CVE-2025-71085", "CVE-2025-71086", "CVE-2025-71088", "CVE-2025-71095", "CVE-2025-71097", "CVE-2025-71098", "CVE-2025-71104", "CVE-2025-71112", "CVE-2025-71113", "CVE-2025-71114", "CVE-2025-71120", "CVE-2025-71123", "CVE-2025-71131", "CVE-2025-71161", "CVE-2025-71162", "CVE-2025-71163", "CVE-2025-71185", "CVE-2025-71186", "CVE-2025-71189", "CVE-2025-71190", "CVE-2025-71191", "CVE-2025-71197", "CVE-2025-71221", "CVE-2025-71265", "CVE-2025-71266", "CVE-2025-71267", "CVE-2026-3497", "CVE-2026-22977", "CVE-2026-22979", "CVE-2026-22980", "CVE-2026-22982", "CVE-2026-22992", "CVE-2026-22994", "CVE-2026-23003", "CVE-2026-23005", "CVE-2026-23010", "CVE-2026-23011", "CVE-2026-23019", "CVE-2026-23026", "CVE-2026-23038", "CVE-2026-23054", "CVE-2026-23060", "CVE-2026-23083", "CVE-2026-23084", "CVE-2026-23086", "CVE-2026-23087", "CVE-2026-23095", "CVE-2026-23100", "CVE-2026-23103", "CVE-2026-23110", "CVE-2026-23111", "CVE-2026-23113", "CVE-2026-23154", "CVE-2026-23204", "CVE-2026-23231", "CVE-2026-23242", "CVE-2026-23243", "CVE-2026-23245", "CVE-2026-23255", "CVE-2026-23270", "CVE-2026-23271", "CVE-2026-23273", "CVE-2026-23274", "CVE-2026-23277", "CVE-2026-23284", "CVE-2026-23287", "CVE-2026-23290", "CVE-2026-23293", "CVE-2026-23300", "CVE-2026-23304", "CVE-2026-23319", "CVE-2026-23321", "CVE-2026-23335", "CVE-2026-23340", "CVE-2026-23343", "CVE-2026-23351", "CVE-2026-23359", "CVE-2026-23365", "CVE-2026-23368", "CVE-2026-23370", "CVE-2026-23378", "CVE-2026-23379", "CVE-2026-23381", "CVE-2026-23391", "CVE-2026-23392", "CVE-2026-23397", "CVE-2026-23398", "CVE-2026-23399", "CVE-2026-23414", "CVE-2026-23422", "CVE-2026-23434", "CVE-2026-23438", "CVE-2026-23439", "CVE-2026-23446", "CVE-2026-23449", "CVE-2026-23450", "CVE-2026-23452", "CVE-2026-23454", "CVE-2026-23455", "CVE-2026-23456", "CVE-2026-23457", "CVE-2026-23458", "CVE-2026-23463", "CVE-2026-23474", "CVE-2026-23475", "CVE-2026-27135", "CVE-2026-31389", "CVE-2026-31391", "CVE-2026-31396", "CVE-2026-31402", "CVE-2026-31403", "CVE-2026-31411", "CVE-2026-31414", "CVE-2026-31415", "CVE-2026-31416", "CVE-2026-31417", "CVE-2026-31418", "CVE-2026-31421", "CVE-2026-31422", "CVE-2026-31423", "CVE-2026-31424", "CVE-2026-31427", "CVE-2026-31428", "CVE-2026-31441", "CVE-2026-31446", "CVE-2026-31447", "CVE-2026-31448", "CVE-2026-31449", "CVE-2026-31450", "CVE-2026-31452", "CVE-2026-31466", "CVE-2026-31469", "CVE-2026-31485", "CVE-2026-31494", "CVE-2026-31495", "CVE-2026-31496", "CVE-2026-31503", "CVE-2026-31504", "CVE-2026-31507", "CVE-2026-31508", "CVE-2026-31515", "CVE-2026-31518", "CVE-2026-31521", "CVE-2026-31533", "CVE-2026-31546", "CVE-2026-31555", "CVE-2026-31563", "CVE-2026-31565", "CVE-2026-31628", "CVE-2026-31634", "CVE-2026-31649", "CVE-2026-31651", "CVE-2026-31658", "CVE-2026-31664", "CVE-2026-31665", "CVE-2026-31669", "CVE-2026-31670", "CVE-2026-31671", "CVE-2026-31674", "CVE-2026-31680", "CVE-2026-31681", "CVE-2026-31682", "CVE-2026-31700", "CVE-2026-31737", "CVE-2026-31752", "CVE-2026-31761", "CVE-2026-31768", "CVE-2026-40355", "CVE-2026-41989", "CVE-2026-43011", "CVE-2026-43024", "CVE-2026-43025", "CVE-2026-43026", "CVE-2026-43027", "CVE-2026-43028", "CVE-2026-43030", "CVE-2026-43033", "CVE-2026-43035", "CVE-2026-43038", "CVE-2026-43040", "CVE-2026-43057", "CVE-2026-43071", "CVE-2026-43085", "CVE-2026-43089", "CVE-2026-43116", "CVE-2026-43216", "CVE-2026-43303", "CVE-2026-43492", "CVE-2026-43499", "CVE-2026-43501", "CVE-2026-45841", "CVE-2026-46015", "CVE-2026-46021", "CVE-2026-46033", "CVE-2026-46037", "CVE-2026-46040", "CVE-2026-46046", "CVE-2026-46086", "CVE-2026-46101", "CVE-2026-46116", "CVE-2026-46132", "CVE-2026-46172", "CVE-2026-46173", "CVE-2026-46174", "CVE-2026-46193", "CVE-2026-46303", "CVE-2026-46306", "CVE-2026-46323", "CVE-2026-46333", "CVE-2026-52910", "CVE-2026-52912", "CVE-2026-52930", "CVE-2026-52933", "CVE-2026-52942", "CVE-2026-52943", "CVE-2026-52946", "CVE-2026-52970", "CVE-2026-52986", "CVE-2026-52998", "CVE-2026-52999", "CVE-2026-53001", "CVE-2026-53002", "CVE-2026-53006", "CVE-2026-53012", "CVE-2026-53050", "CVE-2026-53134", "CVE-2026-53218", "CVE-2026-53219", "CVE-2026-53223", "CVE-2026-53236", "CVE-2026-53239", "CVE-2026-53249", "CVE-2026-53268", "CVE-2026-53269", "CVE-2026-53275", "CVE-2026-53295", "CVE-2026-53352", "CVE-2026-53400", "CVE-2026-63810", "CVE-2026-64279", "CVE-2026-64317", "CVE-2026-64370", "CVE-2026-64371", "CVE-2026-64375", "CVE-2026-64411", "CVE-2026-64412", "CVE-2026-64413", "CVE-2026-64422", "CVE-2026-64423", "CVE-2026-64425", "CVE-2026-64538", "CVE-2026-64545", "CVE-2026-64552", "CVE-2026-64560", "CVE-2026-89196", "CVE-2026-89197", "CVE-2026-89198", "CVE-2026-89199", "CVE-2026-89200", "CVE-2026-89201", "CVE-2026-89202", "CVE-2026-89203", "CVE-2026-89204", "CVE-2026-89205", "CVE-2026-89206", "CVE-2026-59241", "CVE-2026-63350", "CVE-2026-63351", "CVE-2026-63352", "CVE-2026-63353", "CVE-2026-63354", "CVE-2026-63355", "CVE-2026-63356", "CVE-2026-63357", "CVE-2025-6965", "CVE-2025-70873", "CVE-2025-71316", "CVE-2026-11822", "CVE-2026-11824", "CVE-2023-54271", "CVE-2024-26982", "CVE-2024-36922", "CVE-2024-40945", "CVE-2024-53166", "CVE-2024-56647", "CVE-2024-56657", "CVE-2024-57980", "CVE-2024-57981", "CVE-2024-57986", "CVE-2024-57993", "CVE-2024-57996", "CVE-2024-58002", "CVE-2024-58005", "CVE-2024-58009", "CVE-2024-58013", "CVE-2024-58014", "CVE-2024-58017", "CVE-2024-58063", "CVE-2024-58068", "CVE-2024-58071", "CVE-2024-58072", "CVE-2024-58077", "CVE-2024-58079", "CVE-2024-58083", "CVE-2025-21700", "CVE-2025-21703", "CVE-2025-21704", "CVE-2025-21708", "CVE-2025-21716", "CVE-2025-21719", "CVE-2025-21724", "CVE-2025-21725", "CVE-2025-21726", "CVE-2025-21727", "CVE-2025-21728", "CVE-2025-21735", "CVE-2025-21738", "CVE-2025-21744", "CVE-2025-21753", "CVE-2025-21756", "CVE-2025-21761", "CVE-2025-21762", "CVE-2025-21763", "CVE-2025-21766", "CVE-2025-21767", "CVE-2025-21776", "CVE-2025-21779", "CVE-2025-21787", "CVE-2025-21790", "CVE-2025-21791", "CVE-2025-21806", "CVE-2025-21830", "CVE-2025-21832", "CVE-2025-21835", "CVE-2025-21838", "CVE-2025-21844", "CVE-2025-21858", "CVE-2025-21859", "CVE-2025-21862", "CVE-2025-21865", "CVE-2025-22105", "CVE-2025-23131", "CVE-2025-38105", "CVE-2025-38250", "CVE-2025-38584", "CVE-2025-39863", "CVE-2025-39997", "CVE-2025-68239", "CVE-2026-23066", "CVE-2026-23141", "CVE-2026-23157", "CVE-2026-23253", "CVE-2026-23272", "CVE-2026-23278", "CVE-2026-23279", "CVE-2026-23281", "CVE-2026-23291", "CVE-2026-23292", "CVE-2026-23296", "CVE-2026-23302", "CVE-2026-23303", "CVE-2026-23310", "CVE-2026-23312", "CVE-2026-23315", "CVE-2026-23317", "CVE-2026-23318", "CVE-2026-23336", "CVE-2026-23339", "CVE-2026-23352", "CVE-2026-23356", "CVE-2026-23357", "CVE-2026-23364", "CVE-2026-23367", "CVE-2026-23372", "CVE-2026-23382", "CVE-2026-23388", "CVE-2026-23389", "CVE-2026-23395", "CVE-2026-23396", "CVE-2026-23442", "CVE-2026-23444", "CVE-2026-31407", "CVE-2026-31451", "CVE-2026-31488", "CVE-2026-31500", "CVE-2026-31532", "CVE-2026-31580", "CVE-2026-31583", "CVE-2026-31586", "CVE-2026-31611", "CVE-2026-31612", "CVE-2026-31613", "CVE-2026-31617", "CVE-2026-31622", "CVE-2026-31624", "CVE-2026-31625", "CVE-2026-31629", "CVE-2026-31630", "CVE-2026-31637", "CVE-2026-31642", "CVE-2026-31673", "CVE-2026-31676", "CVE-2026-31685", "CVE-2026-31694", "CVE-2026-31696", "CVE-2026-31697", "CVE-2026-31698", "CVE-2026-31699", "CVE-2026-31704", "CVE-2026-31705", "CVE-2026-31708", "CVE-2026-31709", "CVE-2026-31711", "CVE-2026-31712", "CVE-2026-43052", "CVE-2026-43074", "CVE-2026-43080", "CVE-2026-43093", "CVE-2026-43094", "CVE-2026-43099", "CVE-2026-43110", "CVE-2026-43111", "CVE-2026-43112", "CVE-2026-43114", "CVE-2026-43117", "CVE-2026-43350", "CVE-2026-43421", "CVE-2026-43493", "CVE-2026-43496", "CVE-2026-43502", "CVE-2026-43503", "CVE-2026-45834", "CVE-2026-45835", "CVE-2026-45836", "CVE-2026-45838", "CVE-2026-45839", "CVE-2026-45840", "CVE-2026-45842", "CVE-2026-45843", "CVE-2026-45844", "CVE-2026-45850", "CVE-2026-45991", "CVE-2026-45997", "CVE-2026-46003", "CVE-2026-46018", "CVE-2026-46022", "CVE-2026-46023", "CVE-2026-46026", "CVE-2026-46038", "CVE-2026-46044", "CVE-2026-46047", "CVE-2026-46050", "CVE-2026-46051", "CVE-2026-46056", "CVE-2026-46064", "CVE-2026-46065", "CVE-2026-46069", "CVE-2026-46070", "CVE-2026-46083", "CVE-2026-46088", "CVE-2026-46092", "CVE-2026-46099", "CVE-2026-46102", "CVE-2026-46107", "CVE-2026-46110", "CVE-2026-46113", "CVE-2026-46120", "CVE-2026-46122", "CVE-2026-46124", "CVE-2026-46125", "CVE-2026-46128", "CVE-2026-46136", "CVE-2026-46137", "CVE-2026-46146", "CVE-2026-46149", "CVE-2026-46150", "CVE-2026-46151", "CVE-2026-46159", "CVE-2026-46161", "CVE-2026-46163", "CVE-2026-46165", "CVE-2026-46167", "CVE-2026-46168", "CVE-2026-46177", "CVE-2026-46180", "CVE-2026-46185", "CVE-2026-46187", "CVE-2026-46190", "CVE-2026-46191", "CVE-2026-46195", "CVE-2026-46196", "CVE-2026-46209", "CVE-2026-46214", "CVE-2026-46227", "CVE-2026-46234", "CVE-2026-46243", "CVE-2026-46275", "CVE-2026-46294", "CVE-2026-46304", "CVE-2026-46307", "CVE-2026-46320", "CVE-2026-46321", "CVE-2026-46322", "CVE-2026-46331", "CVE-2026-52909", "CVE-2026-52917", "CVE-2026-52918", "CVE-2026-52923", "CVE-2026-52928", "CVE-2026-52929", "CVE-2026-52947", "CVE-2026-52948", "CVE-2026-53080", "CVE-2026-53131", "CVE-2026-53146", "CVE-2026-53147", "CVE-2026-53148", "CVE-2026-53149", "CVE-2026-53150", "CVE-2026-53167", "CVE-2026-53168", "CVE-2026-53177", "CVE-2026-53181", "CVE-2026-53183", "CVE-2026-53184", "CVE-2026-53192", "CVE-2026-53198", "CVE-2026-53208", "CVE-2026-53212", "CVE-2026-53221", "CVE-2026-53225", "CVE-2026-53227", "CVE-2026-53228", "CVE-2026-53242", "CVE-2026-53245", "CVE-2026-53253", "CVE-2026-53254", "CVE-2026-53255", "CVE-2026-53256", "CVE-2026-53263", "CVE-2026-53264", "CVE-2026-53265", "CVE-2026-53325", "CVE-2026-53337", "CVE-2026-53349", "CVE-2026-53350", "CVE-2026-53356", "CVE-2026-53358", "CVE-2026-53362", "CVE-2026-33387", "CVE-2026-33388", "CVE-2026-33389", "CVE-2026-33391", "CVE-2026-33920", "CVE-2026-111594" ], "sourceSummary": "米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "reviewed", "reviewedAt": "2026-10-23T03:49:22.000Z", "reviewState": "current", "summary": "カメラ・映像配信装置、Siemensの制御・管理製品、医療向けIRIS for Healthの告知です。製品名と版を照合し、下の同じ製品の更新先だけを使ってください。サーバー側で対応済みのMeariと、機器更新が必要な製品、修正待ちの製品を分けています。", "risk": "製品ごとに、管理情報を見られる、不正な処理を動かされる、機器や通信が止まるなどの問題があります。例えばWinCCはデータベースへの認証済みアクセス、S7のWebサーバーは権限のある利用者のブラウザー操作、IRISは暗号化せず通信できる設定が関係します。同じ危険が20件すべてに当てはまるわけではありません。", "applicability": [ { "text": "Meari IoT Cloud Platform OpenAPI Serviceは、設定やdevice shadowデータを権限なく操作できる2件の問題です。サーバー側の修正は全利用者に適用済みと公表され、CloudEdgeアプリは必須の更新が案内されています。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "Kiloview E3 NDI Encoderはfirmware 1.30より前、Industrial Edge App Publisherは1.27.9より前、Siemens Software Centerは4.0.9.8より前です。App Publisherでは通信相手の偽装を経由した不正な処理、Software Centerではログイン済みのローカル利用者が置いたDLLの読み込みが問題です。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03" ], "evidenceIds": [ "E3", "E4", "E5", "E6", "E7", "E8" ] }, { "text": "Capital Embedded AR Classicは431-422の全版、およびR20-11の2303より前です。SENTRON 3NA COM Fuseは5.2より前です。PSS SINCALは旧WibuKeyドングルのライセンス機構を使う場合で、V21.5・V22.0の全版とV22.5 Update 5より前が対象です。いずれも主な影響として停止が示されています。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-05", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06" ], "evidenceIds": [ "E9", "E10", "E11", "E12", "E13", "E14" ] }, { "text": "Secure Bootのテスト鍵に関する対象は、SIMATIC IPC BX-21AのBIOS 31.01.13より前、RW-543Aの1.1.4より前、IPC227G・IPC277G・IPC277G PRO・IPC327G・IPC377Gの28.01.15より前です。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-07" ], "evidenceIds": [ "E15", "E16" ] }, { "text": "APOGEE・TALON・Desigoの一部機種には、BACnet通信などによる停止の問題があります。MBC/MEC PPCのBACnet/P2製品は全版、PXC CompactはBACnet 3.5.7より前・P2 2.8.21より前など、型番と通信方式で範囲が異なります。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08" ], "evidenceIds": [ "E17", "E18", "E19" ] }, { "text": "Industrial Edge Device Kitでは、ログイン済み利用者が意図しない場所の情報を読めます。旧V1.5〜V1.25系列と、V1.26の1.26.2-1より前、V1.27の1.27.1-1より前、V1.28の1.28.0-6より前などが対象です。arm64/x86-64の区分も確認します。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09" ], "evidenceIds": [ "E20", "E21", "E22" ] }, { "text": ".NET Client Library for S7 Webserver APIは、CVE-2026-85114が3.3.61より前、CVE-2026-85115が3.3.62より前です。秘密情報の扱いとダウンロード先へのファイル書き込みに関する問題です。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10" ], "evidenceIds": [ "E23", "E24" ] }, { "text": "SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFPはV3.1.7のGNU/Linux subsystem、SIMATIC S7-1500 TM MFPはV1.1.1のGNU/Linux subsystemが対象です。PLC全体のどの処理にも同じ影響があるという意味ではありません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-16" ], "evidenceIds": [ "E25", "E26", "E27", "E28" ] }, { "text": "RUGGEDCOM CROSSBOWとRUGGEDCOM CROSSBOW SACは6.0より前です。前者にはSQL命令・管理認証情報・権限・設定による停止など、後者には内蔵SQLiteに関係するコード実行・情報・停止の問題があります。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15" ], "evidenceIds": [ "E29", "E30", "E31", "E32", "E33", "E34" ] }, { "text": "WinCCの問題は、対象システムのデータベースにログインできる攻撃者が、ホスト上で不正な命令を実行できるものです。WinCC V7.5全版、V8.0 Update 11より前、V8.1 Update 7より前が対象です。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13" ], "evidenceIds": [ "E35", "E36", "E37" ] }, { "text": "SIMATIC/SIPLUS S7のWebサーバーは、告知に列挙されたDrive Controller・ET200・S7-1200/1500などのモデルが対象です。権限のある利用者のブラウザーで不正なスクリプトが動くと、その利用者に許された範囲でPLC操作ができる問題です。利用者の権限を無条件で超えられるという公表ではありません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-14" ], "evidenceIds": [ "E38" ] }, { "text": "Industrial Edge Devicesの認証済み利用者による情報取得は、IECD・IEOD・IEVDの1.28.1より前、IOT2050 Advanced/SMとBX-21Aの1.28.1-2より前、BX-39A・BX-59A・IPC127Eの3.2.0-17より前などが対象です。SCALANCE LPE9413/LPE9433や一部HMI製品には修正版未提供の区分があります。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17" ], "evidenceIds": [ "E39", "E40", "E41", "E42" ] }, { "text": "RUGGEDCOM APE1808はNozomi Guardian/CMCを載せた構成が対象です。細工したダッシュボードの利用・取り込み、監視対象への接続のなりすまし、制限された認証情報管理や設定の操作など、問題ごとに条件が異なります。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18" ], "evidenceIds": [ "E43" ] }, { "text": "InterSystems IRIS for Healthの掲載版は2026.2.0.221、2026.1.0.235、2025.3.0.226です。既定でTLSを必須にしないため、通信中のデータやログイン情報が露出する可能性があります。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01" ], "evidenceIds": [ "E44", "E45" ] }, { "text": "利用中の製品名・型番・完全な版番号を確認し、自分の製品の項目だけを照合してください。複数製品をまとめた告知では、別製品の修正版や対策を流用しません。分からない項目は管理担当者にこのページを渡して確認します。", "kind": "check", "sourceUrls": [ "https://jvn.jp/vu/JVNVU98747108/" ], "evidenceIds": [ "E46", "E47", "E48", "E49", "E50" ] }, { "text": "最初に「CISA ICS Advisory / ICS Medical Advisory（2026年10月22日）」を使っているか、開発元・製品名・バージョンを確認します。同じカテゴリの製品を使っているだけでは、この問題の対象とは限りません。", "kind": "check", "sourceUrls": [ "https://jvn.jp/vu/JVNVU98747108/" ] } ], "versionChecks": [ { "text": "「CISA ICS Advisory / ICS Medical Advisory（2026年10月22日）」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://jvn.jp/vu/JVNVU98747108/" ] } ], "actions": [ { "text": "Meariはサーバー修正の適用済み状況を確認し、CloudEdgeをApp StoreまたはGoogle Playの最新アプリへ更新します。Kiloview E3はV1.30、App Publisherは1.27.9、Software Centerは4.0.9.8以降へ更新します。Software Centerは次回起動時に自動更新されるとされています。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03" ], "evidenceIds": [ "E1", "E2", "E3", "E51", "E5", "E6", "E52", "E7", "E8", "E53" ] }, { "text": "Capital AR Classic R20-11は2303以降へ、SENTRONは5.2以降へ、PSS SINCAL V22.5はUpdate 5以降へ更新します。Capital 431-422は修正予定なし、SINCAL V21.5/V22.0は修正版未提供のため、それぞれ移行方針を提供元と決めてください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-05", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06" ], "evidenceIds": [ "E9", "E10", "E11", "E12", "E54", "E14" ] }, { "text": "IPCのBIOSは、BX-21Aが31.01.13以降、RW-543Aが1.1.4以降、IPC227G・277G・277G PRO・327G・377Gが28.01.15以降へ更新します。別型番用のBIOSを流用しません。更新後はBIOSの既定設定を読み込みます。Secure Boot鍵を既に登録していた場合は、その後に鍵を登録し直す必要があります。担当者が現在の起動設定と鍵の復元手順を確認して実施してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-07" ], "evidenceIds": [ "E15", "E16", "E55" ] }, { "text": "PXC CompactはBACnet 3.5.7以降、P2 2.8.21以降へ更新します。APOGEEのMBC/MEC PPC BACnet/P2は修正予定なしです。ほかのAPOGEE/TALON/Desigo型番も同じ番号と判断せず、機器の完全な型番を保守担当者へ渡して対応を依頼してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08" ], "evidenceIds": [ "E17", "E18", "E19" ] }, { "text": "Device Kitは該当系列の1.26.2-1、1.27.1-1、1.28.0-6以降へ更新します。旧系列には修正予定なしの区分があります。機器に組み込まれたKitは開発用Kitだけ更新しても機器へ反映されないため、機器メーカーの更新を確認します。.NET Client Libraryは3.3.61と3.3.62の両修正が入った版を利用します。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10" ], "evidenceIds": [ "E20", "E56", "E22", "E23", "E57", "E58" ] }, { "text": "RUGGEDCOM CROSSBOWとCROSSBOW SACは、それぞれ製品の6.0以降へ更新します。内蔵ライブラリーの修正番号を機器ファームウェアの番号として使わないでください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15" ], "evidenceIds": [ "E29", "E30", "E31", "E32", "E33", "E34" ] }, { "text": "WinCC V8.0はUpdate 11以降、V8.1はUpdate 7以降へ更新します。V7.5はこの告知時点で修正版がないため、提供元と移行・接続制限を検討してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13" ], "evidenceIds": [ "E35", "E59", "E37" ] }, { "text": "Industrial Edge Devicesは型番に合わせ、IECD・IEOD・IEVDを1.28.1以降、IOT2050 Advanced/SM・BX-21Aを1.28.1-2以降、BX-39A・BX-59A・IPC127Eを3.2.0-17以降へ更新します。SCALANCEやHMIの修正待ち区分へ、これらの更新を流用しません。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17" ], "evidenceIds": [ "E39", "E40", "E41", "E42" ] }, { "text": "Nozomi Guardian/CMC搭載APE1808は、Siemensの顧客サポートへパッチと更新情報を依頼します。CPU 1518 V3.1.7、TM MFP V1.1.1、S7 Webサーバーの告知には、この公表時点で修正版未提供の区分があります。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-16", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-14" ], "evidenceIds": [ "E25", "E26", "E60", "E38", "E27", "E28", "E61", "E43", "E62" ] }, { "text": "IRIS for Healthは担当者がIRIS superserverのTLS設定を「Required」にします。「Enabled」は暗号化しない接続も許可するため、TLS必須化の代わりにはなりません。接続するアプリ側もTLSで接続できることを確認します。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01" ], "evidenceIds": [ "E44", "E63" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://jvn.jp/vu/JVNVU98747108/" ] } ], "temporaryMitigations": [ { "text": "CPU 1518/TM MFPのGNU/Linux subsystemは、信頼できるアプリだけを実行し、shell操作を信頼できる担当者へ限定する緩和策が示されています。Device Kit・Industrial Edge Devicesは管理ネットワークへの接続を信頼できる接続元に制限します。これらは修正済みを意味しません。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-16", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17" ], "evidenceIds": [ "E20", "E56", "E25", "E60", "E27", "E61", "E39", "E64" ] } ], "verification": [ { "text": "担当者から、対象だった製品・適用した修正や設定・反映日時を回答してもらいます。製品ごとの公式情報と照合してから完了とし、通常業務が続けられることも確認してください。", "kind": "procedure", "sourceUrls": [ "https://jvn.jp/vu/JVNVU98747108/" ], "evidenceIds": [ "E46", "E47", "E48", "E49", "E50" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://jvn.jp/vu/JVNVU98747108/" ] } ], "unknowns": [ "公表時点の公式資料を照合した説明です。実際の機器や設定を検査した結果ではありません。修正版や対応状況は製品・系列ごとに確認してください。", "多くの型番を含む告知は、ここに挙げた代表製品だけでは安全・対象外を確定できません。完全な型番と通信方式が一致する公式の製品表で最終照合してください。" ], "supportRequest": "件名：JVNVU98747108（CISA ICS Advisory / ICS Medical Advisory（2026年10月22日））の影響と対応状況の確認\n\n利用中のサイト・機器・サービス：[記入してください]\n製品名・開発元：[記入してください]\n現在のバージョン・ビルド番号：[不明なら「不明」と記入]\n\nJVNVU98747108について、次を教えてください。\n1. この環境は対象ですか。対象外の場合は、版・設定・機能などの判断理由を教えてください。\n2. 対象の場合、修正を含む版・パッケージ番号と、更新方法を教えてください。古い版に修正を取り込んでいる場合は、このCVEへの対応状況を教えてください。\n3. いつ対応できますか。再起動・停止時間・事前のバックアップや確認作業は必要ですか。\n4. すぐ更新できない場合、正式な回避策とその限界・副作用を教えてください。利用を続けてよい条件も知りたいです。\n5. 対応完了後、修正を確認できる版・設定・対応日時を連絡してください。\n\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/JVNVU98747108", "sources": [ { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-05", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-07", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-16", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-14", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18", "label": "公的機関・開発元の個別告知" }, { "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01", "label": "公的機関・開発元の個別告知" }, { "url": "https://jvn.jp/vu/JVNVU98747108/", "label": "JVN：関連する公式告知の一覧" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "reviewedSourceFingerprint": "reviewed-source-v1:31854b7eb0f60c3cc4a4760c467e73f74271ae4d069d68f8d2f46162bee87b33", "reviewedSourceScope": "official_evidence", "evidence": [ { "id": "E1", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Meari IoT Cloud Platform OpenAPI Service (Update A) | CISA\n\nSummary\n\nSuccessful exploitation of these vulnerabilities could allow attackers to manipulate device configurations, trigger unauthorized behaviors, and access sensitive information such as device credentials, owner details, and network data without proper authorization.\n\nThe following versions of Meari IoT Cloud Platform OpenAPI Service (Update A) are affected:\n\nIoT Cloud Platform OpenAPI Service vers:all/* (CVE-2026-101104, CVE-2026-96613)\n\nCVSS\nVendor\nEquipment\n\nv3 7.7\nMeari\nIoT Cloud Platform OpenAPI Service\n\n1 Vulnerability\n\nMissing Authorization\n\nBackground\n\nCritical Infrastructure Sectors: Commercial Facilities, Information Technology\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: China\n\nVulnerabilities\n\nExpand All +\n\nCVE-2026-101104\n\nThe Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own. This vulnerability enables attackers to perform unauthorized actions, such as altering device settings or triggering unintended behaviors, without verifying ownership or permissions.\n\nRead More\n\n1 Affected Product\n\nMeari IoT Cloud Platform", "language": "en" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "IoT Cloud Platform OpenAPI Service: vers:all/*\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nBoth vulnerabilities have been remediated. The required server-side fixes have been deployed to the Meari IoT Cloud Platform and are now effective for all users.\n\nMitigation\nTo ensure compatibility with these changes, all CloudEdge users are required to upgrade to the latest version of the application. Upon launching CloudEdge, users will receive a mandatory update prompt and must complete the upgrade before continuing to use the app. The latest version of CloudEdge is available on the Apple App Store and Google Play.\n\nVendor fix\nSpecifically, Meari implemented the following protections in its IoT Cloud Platform OpenAPI Service:\n\nMitigation\nCVE-2026-101104: Server-side authorization checks now verify the ownership relationship between the authenticated account and the target device before processing device configuration requests. Requests for devices that are not bound to the authenticated account are rejected.\n\nMitigation\nIoT Cloud Platform OpenAPI users are advised to contact Meari for further support https://www.meari.com/en/downLoadCenter.\n\nAdditional Metrics\n\nRelevant CWE: CWE-862 Missing Authorization\n\nCVSS Version\nBase Score\nBase Severity\nVector Stri", "language": "en" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Kiloview E3 NDI Encoder | CISA\n\nSummary\n\nSuccessful exploitation of this these vulnerabilities could allow an attacker to fully compromise the device.\n\nThe following versions of Kiloview E3 NDI Encoder are affected:\n\nE3 Firmware <1.30 (CVE-2026-109122, CVE-2026-111100, CVE-2026-96616, CVE-2026-105265, CVE-2026-110491, CVE-2026-107861, CVE-2026-110243, CVE-2026-92450, CVE-2026-110825)\n\nCVSS\nVendor\nEquipment\n\nv3 9.9\nKiloview\nE3 Firmware\n\n6 Vulnerabilities\n\nImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Missing Authentication for Critical Function, Insufficient Session Expiration, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), NULL Pointer Dereference, Use of Hard-coded Credentials\n\nBackground\n\nCritical Infrastructure Sectors: Communications, Information Technology\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: China\n\nVulnerabilities\n\nExpand All +\n\nCVE-2026-109122\n\nThe network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when configuring static routes via the web management API. An authenticated web user with permission to configure static routes can exploit this to execute arbitrary", "language": "en" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "is these vulnerabilities could allow an attacker to fully compromise the device.\n\nThe following versions of Kiloview E3 NDI Encoder are affected:\n\nE3 Firmware <1.30 (CVE-2026-109122, CVE-2026-111100, CVE-2026-96616, CVE-2026-105265, CVE-2026-110491, CVE-2026-107861, CVE-2026-110243, CVE-2026-92450, CVE-2026-110825)\n\nCVSS\nVendor\nEquipment\n\nv3 9.9\nKiloview\nE3 Firmware\n\n6 Vulnerabilities\n\nImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Mis", "language": "en" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens Industrial Edge App Publisher | CISA\n\nSummary\n\nThe Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to impersonate the management server and execute arbitrary code (RCE) on the local machine through Node.js integration. Siemens has released an update for the Industrial Edge App Publisher and recommends to update to the latest version.\n\nThe following versions of Siemens Industrial Edge App Publisher are affected:\n\nIndustrial Edge App Publisher vers:intdot/<1.27.9 (CVE-2026-78556, CVE-2026-78557)\n\nCVSS\nVendor\nEquipment\n\nv3 8.3\nSiemens\nIndustrial Edge App Publisher\n\n2 Vulnerabilities\n\nImproper Certificate Validation, Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nExpand All +\n\nCVE-2026-78556\n\nThe affected software does not properly vali", "language": "en" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "nds to update to the latest version.\n\nThe following versions of Siemens Industrial Edge App Publisher are affected:\n\nIndustrial Edge App Publisher vers:intdot/<1.27.9 (CVE-2026-78556, CVE-2026-78557)\n\nCVSS\nVendor\nEquipment\n\nv3 8.3\nSiemens\nIndustrial Edge App Publisher\n\n2 Vulnerabilities\n\nImproper Certificate Validation, Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transport", "language": "en" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens Software Center | CISA\n\nSummary\n\nThe affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Siemens has released a new version for Siemens Software Center and recommends to update to the latest version. Please refer to our blog post for additional information about current known active exploitation and how to detect it.\n\nThe following versions of Siemens Software Center are affected:\n\nSiemens Software Center vers:intdot/<4.0.9.8 (CVE-2026-110936)\n\nCVSS\nVendor\nEquipment\n\nv3 6.7\nSiemens\nSiemens Software Center\n\n1 Vulnerability\n\nUncontrolled Search Path Element\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nCVE-2026-110936\n\nThe affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated", "language": "en" }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "current known active exploitation and how to detect it.\n\nThe following versions of Siemens Software Center are affected:\n\nSiemens Software Center vers:intdot/<4.0.9.8 (CVE-2026-110936)\n\nCVSS\nVendor\nEquipment\n\nv3 6.7\nSiemens\nSiemens Software Center\n\n1 Vulnerability\n\nUncontrolled Search Path Element\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities", "language": "en" }, { "id": "E9", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens Capital Embedded AR Classic | CISA\n\nSummary\n\nThe products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends updating to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.\n\nThe following versions of Siemens Capital Embedded AR Classic are affected:\n\nCapital Embedded AR Classic 431-422 vers:all/* (CVE-2026-89208)\n\nCapital Embedded AR Classic R20-11 vers:intdot/<2303 (CVE-2026-89208)\n\nCVSS\nVendor\nEquipment\n\nv3 5.3\nSiemens\nCapital Embedded AR Classic 431-422\n\n1 Vulnerability\n\nOut-of-bounds Read\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nCVE-2026-89208\n\nThe affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to", "language": "en" }, { "id": "E10", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Products\n\nCapital Embedded AR Classic 431-422\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nApply network segmentation and put the ECUs behind properly configured gateways/firewalls\n\nNo fix planned\nCurrently no fix is planned\n\nCapital Embedded AR Classic R20-11 < V2303\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nApply network segmentation and put the ECUs behind properly configured gateways/firewalls\n\nVendor fix\nUpdate to V2303 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\n\nView CVE Details", "language": "en" }, { "id": "E11", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-05", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens SENTRON 3NA COM Fuse | CISA\n\nSummary\n\nSENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition. Successful exploitation may require the affected network to be re-established to restore normal operation.\n\nThe following versions of Siemens SENTRON 3NA COM Fuse are affected:\n\nSENTRON 3NA COM Fuse vers:intdot/<5.2 (CVE-2024-7322)\n\nCVSS\nVendor\nEquipment\n\nv3 5.8\nSiemens\nSENTRON 3NA COM Fuse\n\n1 Vulnerability\n\nImproper Verification of Source of a Communication Channel\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nCVE-2024-7322\n\nA ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established\n\nRead More\n\n1 Affected Product\n\nSENTRON 3NA COM Fuse < V5.2\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V5.2 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-940 Improper Verification of Source of a Communication Channel\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n5.8\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H\n\nView CVE Details", "language": "en" }, { "id": "E12", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens PSS(R)SINCAL | CISA\n\nSummary\n\nPSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to use the legacy WibuKey dongle license type. Siemens is actively preparing updates and recommends applicable mitigations for products where patches are currently unavailable.\n\nThe following versions of Siemens PSS(R)SINCAL are affected:\n\nPSS(R)SINCAL V21.5 vers:all/* (CVE-2026-84854)\n\nPSS(R)SINCAL V22.0 vers:all/* (CVE-2026-84854)\n\nPSS(R)SINCAL V22.5 vers:intdot/<22.5.5 (CVE-2026-84854)\n\nCVSS\nVendor\nEquipment\n\nv3 7\nSiemens\nPSS(R)SINCAL V21.5\n\n1 Vulnerability\n\nOut-of-bounds Write\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nCVE-2026-84854\n\nIn the WibuKey driver, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the inten", "language": "en" }, { "id": "E13", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "mmends applicable mitigations for products where patches are currently unavailable.\n\nThe following versions of Siemens PSS(R)SINCAL are affected:\n\nPSS(R)SINCAL V21.5 vers:all/* (CVE-2026-84854)\n\nPSS(R)SINCAL V22.0 vers:all/* (CVE-2026-84854)\n\nPSS(R)SINCAL V22.5 vers:intdot/<22.5.5 (CVE-2026-84854)\n\nCVSS\nVendor\nEquipment\n\nv3 7\nSiemens\nPSS(R)SINCAL V21.5\n\n1 Vulnerability\n\nOut-of-bounds Write\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financia", "language": "en" }, { "id": "E14", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "More\n\n3 Affected Products\n\nPSS(R)SINCAL V21.5\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nInstall WIBU Systems WibuKey Runtime for Windows 6.72 or later version manually to fix the issue: Download the package from User Software - Wibu-Systems and follow the installation instructions from WIBU Systems.\n\nNone available\nCurrently no fix is available\n\nPSS(R)SINCAL V22.0\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nInstall WIBU Systems WibuKey Runtime for Windows 6.72 or later version manually to fix the issue: Download the package from User Software - Wibu-Systems and follow the installation instructions from WIBU Systems.\n\nNone available\nCurrently no fix is available\n\nPSS(R)SINCAL V22.5 < V22.5 Update 5\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V22.5 Update 5 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details", "language": "en" }, { "id": "E15", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-07", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens SIMATIC IPCs | CISA\n\nSummary\n\nThe products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new versions for the affected products and recommends to update to the latest versions.\n\nThe following versions of Siemens SIMATIC IPCs are affected:\n\nSIMATIC IPC BX-21A vers:intdot/<31.01.13 (CVE-2026-72895)\n\nSIMATIC IPC RW-543A vers:intdot/<1.1.4 (CVE-2026-72895)\n\nSIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G vers:intdot/<28.01.15 (CVE-2026-72895)\n\nCVSS\nVendor\nEquipment\n\nv3 7.7\nSiemens\nSIMATIC IPC BX-21A\n\n1 Vulnerability\n\nUse of Default Cryptographic Key\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nCVE-2026-72895\n\nA BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a local attacker with physical or administrative access to the device to boot an operating system or U", "language": "en" }, { "id": "E16", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-07", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "fected products and recommends to update to the latest versions.\n\nThe following versions of Siemens SIMATIC IPCs are affected:\n\nSIMATIC IPC BX-21A vers:intdot/<31.01.13 (CVE-2026-72895)\n\nSIMATIC IPC RW-543A vers:intdot/<1.1.4 (CVE-2026-72895)\n\nSIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G vers:intdot/<28.01.15 (CVE-2026-72895)\n\nCVSS\nVendor\nEquipment\n\nv3 7.7\nSiemens\nSIMATIC IPC BX-21A\n\n1 Vulnerability\n\nUse of Default Cryptographic Key\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCount", "language": "en" }, { "id": "E17", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens APOGEE, TALON and Desigo PXC/PXM Products | CISA\n\nSummary\n\nThe products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens APOGEE, TALON and Desigo PXC/PXM Products are affected:\n\nAPOGEE MBC (PPC) (BACnet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE MBC (PPC) (P2 Ethernet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE MEC (PPC) (BACnet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE MEC (PPC) (P2 Ethernet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE PXC Compact (BACnet) vers:intdot/<3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE PXC Compact (P2 Ethernet) vers:intdot/<2.8.21 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE PXC Modular (BACn", "language": "en" }, { "id": "E18", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "2076)\n\nAPOGEE MEC (PPC) (P2 Ethernet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE PXC Compact (BACnet) vers:intdot/<3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE PXC Compact (P2 Ethernet) vers:intdot/<2.8.21 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE PXC Modular (BACnet) vers:intdot/<3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nAPOGEE PXC Modular (P2 Ethernet) vers:intdot/<2.8.21 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)\n\nDesigo PX", "language": "en" }, { "id": "E19", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "13 Affected Products\n\nDesigo PXC00-U >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC001-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC100-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC12-E.D >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC128-U >= V2.3\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nCVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.\n\nNo fix planned\nCurrently no fix is planned\n\nDesigo PXC200-E.D >= V2.3\n\nProduct Status:", "language": "en" }, { "id": "E20", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens Industrial Edge Device Kit | CISA\n\nSummary\n\nUsers of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.\n\nThe following versions of Siemens Industrial Edge Device Kit are affected:\n\nIndustrial Edge Device Kit - arm64 V1.10 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.11 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.12 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.13 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.14 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.15 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.16 ver", "language": "en" }, { "id": "E21", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "ll/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.24 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.25 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.26 vers:intdot/<1.26.2.1 (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.27 vers:intdot/<1.27.1.1 (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.28 vers:intdot/<1.28.0.6 (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.5 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.6 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.7 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Device Kit - arm64 V1.8 vers:all/* (CVE-2026-44414, CVE-2026-44415)\n\nIndustrial Edge Dev", "language": "en" }, { "id": "E22", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.26 < V1.26.2-1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.26.2-1 or later version\n\nIndustrial Edge Device Kit - arm64 V1.27 < V1.27.1-1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.27.1-1 or later version\n\nIndustrial Edge Device Kit - arm64 V1.28 < V1.28.0-6\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.0-6 or later version\n\nIndustrial Edge Device Kit - arm64 V1.11\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected", "language": "en" }, { "id": "E23", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens SIMATIC S7 Webserver API | CISA\n\nSummary\n\n.NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory. Siemens has released a new version for .NET Client Library for SIMATIC S7 Webserver API and recommends to update to the latest version.\n\nThe following versions of Siemens SIMATIC S7 Webserver API are affected:\n\n.NET Client Library for SIMATIC S7 Webserver API vers:intdot/<3.3.61, vers:intdot/<3.3.62 (CVE-2026-85114, CVE-2026-85115)\n\nCVSS\nVendor\nEquipment\n\nv3 7.5\nSiemens\n.NET Client Library for SIMATIC S7 Webserver API\n\n2 Vulnerabilities\n\nImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Generation of Error Message Containing Sensitive Information\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nExpand All +\n\nCVE-2026-85114\n\nAffected applications do not properly validate filenames received from remote servers during ti", "language": "en" }, { "id": "E24", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "to the latest version.\n\nThe following versions of Siemens SIMATIC S7 Webserver API are affected:\n\n.NET Client Library for SIMATIC S7 Webserver API vers:intdot/<3.3.61, vers:intdot/<3.3.62 (CVE-2026-85114, CVE-2026-85115)\n\nCVSS\nVendor\nEquipment\n\nv3 7.5\nSiemens\n.NET Client Library for SIMATIC S7 Webserver API\n\n2 Vulnerabilities\n\nImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Generation of Error Message Containing Sensitive Information\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing,", "language": "en" }, { "id": "E25", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP | CISA\n\nSummary\n\nMultiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP are affected:\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) vers:intdot/>=3.1.7\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) vers:intdot/>=3.1.7\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) vers:intdot/>=3.1.7\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) vers:intdot/>=3.1.7\n\nSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) vers:intdot/>=3.1.7\n\nCVSS\nVendor\nEquipment\n\nv3 10\nSiemens\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)\n\n428 Vulnerabilities\n\nAccess of Resource Using Incompatible Type ('Type Confusion'), Access of Uninitialized Pointer, Active Debug Code, Buffer Access with Incorrect Length Value, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Buffer Underwrite ('Buffer Underflow'), Concurr", "language": "en" }, { "id": "E26", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "IC S7-1500 CPU 1518(F)-4 PN/DP MFP | CISA\n\nSummary\n\nMultiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP are affected:\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6", "language": "en" }, { "id": "E27", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-16", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens SIMATIC S7-1500 TM MFP | CISA\n\nSummary\n\nMultiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens SIMATIC S7-1500 TM MFP are affected:\n\nSIMATIC S7-1500 TM MFP - GNU/Linux subsystem vers:all/*\n\nCVSS\nVendor\nEquipment\n\nv3 10\nSiemens\nSIMATIC S7-1500 TM MFP - GNU/Linux subsystem\n\n377 Vulnerabilities\n\nAccess of Uninitialized Pointer, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Deadlock, Detection of Error Condition Without Action, Double Free, Expired Pointer Dereference, Heap-based Buffer Overflow, Improper Control of Resource Identifiers ('Resource Injection'), Improper Control of a Resource Through its Lifetime, Improper Handling of Length Parameter Inconsistency, Improper Handling of Missing Special Element, Improper Handling of Structural Elements, Improper Input Validation, Improper Locking, Improper Resource Locking, Improper Restriction of Operations within the Bounds of a Memory Buffer, Improper Update of Reference Count, Improper Validation of Array Index, Improper Validation of", "language": "en" }, { "id": "E28", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-16", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "emens SIMATIC S7-1500 TM MFP | CISA\n\nSummary\n\nMultiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens SIMATIC S7-1500 TM MFP are affected:\n\nSIMATIC S7-1500 TM MFP - GNU/Linux subsystem vers:all/*\n\nCVSS\nVendor\nEquipment\n\nv3 10\nSiemens\nSIMATIC S7-1500 TM MFP - GNU/Linu", "language": "en" }, { "id": "E29", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens RUGGEDCOM CROSSBOW | CISA\n\nSummary\n\nRUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service. Siemens has released a new version for RUGGEDCOM CROSSBOW and recommends to update to the latest version.\n\nThe following versions of Siemens RUGGEDCOM CROSSBOW are affected:\n\nRUGGEDCOM CROSSBOW vers:intdot/<6.0 (CVE-2026-89196, CVE-2026-89197, CVE-2026-89198, CVE-2026-89199, CVE-2026-89200, CVE-2026-89201, CVE-2026-89202, CVE-2026-89203, CVE-2026-89204, CVE-2026-89205, CVE-2026-89206)\n\nCVSS\nVendor\nEquipment\n\nv3 8.8\nSiemens\nRUGGEDCOM CROSSBOW\n\n4 Vulnerabilities\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Authorization Bypass Through User-Controlled Key, Insertion of Sensitive Information Into Sent Data, Client-Side Enforcement of Server-Side Security\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilitie", "language": "en" }, { "id": "E30", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "M CROSSBOW and recommends to update to the latest version.\n\nThe following versions of Siemens RUGGEDCOM CROSSBOW are affected:\n\nRUGGEDCOM CROSSBOW vers:intdot/<6.0 (CVE-2026-89196, CVE-2026-89197, CVE-2026-89198, CVE-2026-89199, CVE-2026-89200, CVE-2026-89201, CVE-2026-89202, CVE-2026-89203, CVE-2026-89204, CVE-2026-89205, CVE-2026-89206)\n\nCVSS\nVendor\nEquipment\n\nv3 8.8\nSiemens\nRUGGEDCOM CROSSBOW\n\n4 Vulnerabilities\n\nImproper Neutralization of Special Elements used in an SQL Comma", "language": "en" }, { "id": "E31", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "1 Affected Product\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n8.8\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details\n\nCVE-2026-89197\n\nAffected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.\n\nRead More\n\n2 Affected Products\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n8.8\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details\n\nCVE-2026-89198\n\nAffected devices do not properly val", "language": "en" }, { "id": "E32", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens RUGGEDCOM CROSSBOW Station Access Controller | CISA\n\nSummary\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.\n\nThe following versions of Siemens RUGGEDCOM CROSSBOW Station Access Controller are affected:\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) vers:intdot/<6.0 (CVE-2025-6965, CVE-2025-70873, CVE-2025-71316, CVE-2026-11822, CVE-2026-11824)\n\nCVSS\nVendor\nEquipment\n\nv3 9.8\nSiemens\nRUGGEDCOM CROSSBOW Station Access Controller (SAC)\n\n4 Vulnerabilities\n\nNumeric Truncation Error, Improper Clearing of Heap Memory Before Release ('Heap Inspection'), Improper Handling of Unicode Encoding, Heap-based Buffer Overflow\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nExpand All", "language": "en" }, { "id": "E33", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "The following versions of Siemens RUGGEDCOM CROSSBOW Station Access Controller are affected:\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) vers:intdot/<6.0 (CVE-2025-6965, CVE-2025-70873, CVE-2025-71316, CVE-2026-11822, CVE-2026-11824)\n\nCVSS\nVendor\nEquipment\n\nv3 9.8\nSiemens\nRUGGEDCOM CROSSBOW Station Access Controller (SAC)\n\n4 Vulnerabilities\n\nNumeric Truncation Error, Improper Clearing of Heap Memory Before Release ('Heap Inspection'), Improper Handling of Unicode Encod", "language": "en" }, { "id": "E34", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "ROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-197 Numeric Truncation Error\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.7\nHIGH\nCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L\n\nView CVE Details\n\nCVE-2025-70873\n\nAn information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.\n\nRead More\n\n2 Affected Products\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nRUGGEDCOM CROSSBOW Station Access Controller (SAC) < V6.0\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V6.0 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n\nView CVE Details\n\nCVE-2025-71316\n\nSQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker coul", "language": "en" }, { "id": "E35", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens WinCC | CISA\n\nSummary\n\nMultiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens WinCC are affected:\n\nSIMATIC WinCC V7.5 vers:all/* (CVE-2026-59241)\n\nSIMATIC WinCC V8.0 vers:intdot/<8.0.0.11 (CVE-2026-59241)\n\nSIMATIC WinCC V8.1 vers:intdot/<8.1.7 (CVE-2026-59241)\n\nCVSS\nVendor\nEquipment\n\nv3 8.8\nSiemens\nSIMATIC WinCC V7.5\n\n1 Vulnerability\n\nIncorrect Privilege Assignment\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nCVE-2026-59241\n\nThe affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker wit", "language": "en" }, { "id": "E36", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "r fixes and recommends mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens WinCC are affected:\n\nSIMATIC WinCC V7.5 vers:all/* (CVE-2026-59241)\n\nSIMATIC WinCC V8.0 vers:intdot/<8.0.0.11 (CVE-2026-59241)\n\nSIMATIC WinCC V8.1 vers:intdot/<8.1.7 (CVE-2026-59241)\n\nCVSS\nVendor\nEquipment\n\nv3 8.8\nSiemens\nSIMATIC WinCC V7.5\n\n1 Vulnerability\n\nIncorrect Privilege Assignment\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing,", "language": "en" }, { "id": "E37", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "More\n\n3 Affected Products\n\nSIMATIC WinCC V7.5\n\nProduct Status: known_affected\n\nRemediations\n\nNone available\nCurrently no fix is available\n\nSIMATIC WinCC V8.0 < V8.0 Update 11\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V8.0 Update 11 or later version\n\nSIMATIC WinCC V8.1 < V8.1 Update 7\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V8.1 Update 7 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-266 Incorrect Privilege Assignment\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n8.8\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details", "language": "en" }, { "id": "E38", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-14", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens SIMATIC S7 PLCs Web Server | CISA\n\nSummary\n\nSIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of that user’s authorization. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens SIMATIC S7 PLCs Web Server are affected:\n\nSIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357)\n\nSIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0) vers:all/* (CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355", "language": "en" }, { "id": "E39", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens Industrial Edge Devices | CISA\n\nSummary\n\nSiemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens Industrial Edge Devices are affected:\n\nIndustrial Edge Cloud Device (IECD) vers:intdot/<1.28.1 (CVE-2026-44414)\n\nIndustrial Edge Own Device (IEOD) vers:intdot/<1.28.1 (CVE-2026-44414)\n\nIndustrial Edge Virtual Device (IEVD) vers:intdot/<1.28.1 (CVE-2026-44414)\n\nSCALANCE LPE9413 (6GK5998-3GS01-2AC2) vers:all/* (CVE-2026-44414)\n\nSCALANCE LPE9433 (6GK5998-3GS11-2AC2) vers:all/* (CVE-2026-44414)\n\nSIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0) vers:all/* (CVE-2026-44415)\n\nSIMATIC HMI MTP1000, Unified Comfort Panel neu", "language": "en" }, { "id": "E40", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "fixes are not or not yet available.\n\nThe following versions of Siemens Industrial Edge Devices are affected:\n\nIndustrial Edge Cloud Device (IECD) vers:intdot/<1.28.1 (CVE-2026-44414)\n\nIndustrial Edge Own Device (IEOD) vers:intdot/<1.28.1 (CVE-2026-44414)\n\nIndustrial Edge Virtual Device (IEVD) vers:intdot/<1.28.1 (CVE-2026-44414)\n\nSCALANCE LPE9413 (6GK5998-3GS01-2AC2) vers:all/* (CVE-2026-44414)\n\nSCALANCE LPE9433 (6GK5998-3GS11-2AC2) vers:all/* (CVE-2026-44414)\n\nSIMATIC HMI MTP1000", "language": "en" }, { "id": "E41", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Industrial Edge Cloud Device (IECD) < V1.28.1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.1 or later version\n\nIndustrial Edge Own Device (IEOD) < V1.28.1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.1 or later version\n\nIndustrial Edge Virtual Device (IEVD) < V1.28.1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.1 or later version\n\nSCALANCE LPE9413 (6GK5998-3GS01-2AC2)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSCALANCE LPE9433 (6GK5998-3GS11-2AC2)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2) < V1.28.1-2\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.1-2 or later version\n\nSIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2) < V1.28.1-2\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network acce", "language": "en" }, { "id": "E42", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "k access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.1-2 or later version\n\nSIMATIC IPC BX-39A Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V3.2.0-17 or later version\n\nSIMATIC IPC BX-59A Industrial Edge Device < V3.2.0-17\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access", "language": "en" }, { "id": "E43", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Siemens RUGGEDCOM APE1808 Devices | CISA\n\nSummary\n\nNozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer support to receive patch and update information.\n\nThe following versions of Siemens RUGGEDCOM APE1808 Devices are affected:\n\nRUGGEDCOM APE1808 vers:all/* (CVE-2026-33387, CVE-2026-33388, CVE-2026-33389, CVE-2026-33391, CVE-2026-33920)\n\nCVSS\nVendor\nEquipment\n\nv3 7.5\nSiemens\nRUGGEDCOM APE1808\n\n4 Vulnerabilities\n\nImproper Neutralization of Special Elements Used in a Template Engine, Incorrect Authorization, Lack of Administrator Control over Security, Cross-Site Request Forgery (CSRF)\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\nVulnerabilities\n\nExpand All +\n\nCVE-2026-33387\n\nA template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privilege", "language": "en" }, { "id": "E44", "sourceUrl": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "InterSystems Corporation InterSystems IRIS for Health | CISA\n\nSummary\n\nSuccessful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device.\n\nThe following versions of InterSystems Corporation InterSystems IRIS for Health are affected:\n\nInterSystems IRIS for Health 2026.2.0.221, 2026.1.0.235, 2025.3.0.226 (CVE-2026-111594, CVE-2026-111594, CVE-2026-111594)\n\nCVSS\nVendor\nEquipment\n\nv3 8.1\nInterSystems Corporation\nInterSystems IRIS for Health\n\n1 Vulnerability\n\nCleartext Transmission of Sensitive Information\n\nBackground\n\nCritical Infrastructure Sectors: Healthcare and Public Health\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: United States\n\nVulnerabilities\n\nCVE-2026-111594\n\nInterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.\n\nRead More\n\n3 Affected Products\n\nInterSystems Corporation InterSystems IRIS for Health: 2026.2.0.221\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nInterSystems recommends users configure IRIS superserver to require SSL/TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?", "language": "en" }, { "id": "E45", "sourceUrl": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "that data to log into the device.\n\nThe following versions of InterSystems Corporation InterSystems IRIS for Health are affected:\n\nInterSystems IRIS for Health 2026.2.0.221, 2026.1.0.235, 2025.3.0.226 (CVE-2026-111594, CVE-2026-111594, CVE-2026-111594)\n\nCVSS\nVendor\nEquipment\n\nv3 8.1\nInterSystems Corporation\nInterSystems IRIS for Health\n\n1 Vulnerability\n\nCleartext Transmission of Sensitive Information\n\nBackground\n\nCritical Infrastructure Sectors: Healthcare and Public Health\n\nCountries/Areas Deployed: Worldwide\n\nCom", "language": "en" }, { "id": "E46", "sourceUrl": "https://jvn.jp/vu/JVNVU98747108/", "sourceField": "section:概要", "excerpt": "米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。", "language": "ja" }, { "id": "E47", "sourceUrl": "https://jvn.jp/vu/JVNVU98747108/", "sourceField": "section:影響を受けるシステム", "excerpt": "ICS Advisory / ICS Medical Advisoryを参照してください。", "language": "ja" }, { "id": "E48", "sourceUrl": "https://jvn.jp/vu/JVNVU98747108/", "sourceField": "section:詳細情報", "excerpt": "新規：19件\n\nICSA-26-295-01: Kiloview E3 NDI Encoder\n\nICSA-26-295-02: Siemens Industrial Edge App Publisher\n\nICSA-26-295-03: Siemens Software Center\n\nICSA-26-295-04: Siemens Capital Embedded AR Classic\n\nICSA-26-295-05: Siemens SENTRON 3NA COM Fuse\n\nICSA-26-295-06: Siemens PSS(R)SINCAL\n\nICSA-26-295-07: Siemens SIMATIC IPCs\n\nICSA-26-295-08: Siemens APOGEE, TALON and Desigo PXC/PXM Products\n\nICSA-26-295-09: Siemens Industrial Edge Device Kit\n\nICSA-26-295-10: Siemens SIMATIC S7 Webserver API\n\nICSA-26-295-11: Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP\n\nICSA-26-295-12: Siemens RUGGEDCOM CROSSBOW\n\nICSA-26-295-13: Siemens WinCC\n\nICSA-26-295-14: Siemens SIMATIC S7 PLCs Web Server\n\nICSA-26-295-15: Siemens RUGGEDCOM CROSSBOW Station Access Controller\n\nICSA-26-295-16: Siemens SIMATIC S7-1500 TM MFP\n\nICSA-26-295-17: Siemens Industrial Edge Devices\n\nICSA-26-295-18: Siemens RUGGEDCOM APE1808 Devices\n\nICSMA-26-295-01: InterSystems Corporation InterSystems IRIS for Health\n\n更新：1件\n\nICSA-26-274-06: Meari IoT Cloud Platform OpenAPI Service (Update A)", "language": "ja" }, { "id": "E49", "sourceUrl": "https://jvn.jp/vu/JVNVU98747108/", "sourceField": "section:想定される影響", "excerpt": "ICS Advisory / ICS Medical Advisoryを参照してください。", "language": "ja" }, { "id": "E50", "sourceUrl": "https://jvn.jp/vu/JVNVU98747108/", "sourceField": "section:対策方法", "excerpt": "ICS Advisory / ICS Medical Advisoryを参照してください。", "language": "ja" }, { "id": "E51", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "rial.\n\nRead More\n\n1 Affected Product\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nAdditional Metrics\n\nRelevant CWE: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H\n\n4.0\n9.4\nCRITICAL\nCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\n\nView CVE Details\n\nCVE-2026-111100\n\nThe ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting vulnerable devices and preparing targeted credential attacks.\n\nRead More\n\n2 Affected Products\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends u", "language": "en" }, { "id": "E52", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "oduct\n\nIndustrial Edge App Publisher < V1.27.9\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V1.27.9 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-295 Improper Certificate Validation\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.4\nHIGH\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N\n\nView CVE Details\n\nCVE-2026-78557\n\nThe application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for the execution of arbitrary JavaScript, which can be leveraged to achieve remote code execution (RCE) on the victim's machine\n\nRead More\n\n2 Affected Products\n\nIndustrial Edge App Publisher < V1.27.9\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V1.27.9 or later version\n\nIndustrial Edge App Publisher < V1.27.9\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V1.27.9 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n8.3\nHIGH\nCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H\n\nView CVE Details", "language": "en" }, { "id": "E53", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "ed Product\n\nSiemens Software Center < V4.0.9.8\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V4.0.9.8 or later version (All existing versions of SSC will be auto updated on next startup. The latest version can also be downloaded in the respective link)\n\nAdditional Metrics\n\nRelevant CWE: CWE-427 Uncontrolled Search Path Element\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n6.7\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details", "language": "en" }, { "id": "E54", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "mmends applicable mitigations for products where patches are currently unavailable.\n\nThe following versions of Siemens PSS(R)SINCAL are affected:\n\nPSS(R)SINCAL V21.5 vers:all/* (CVE-2026-84854)\n\nPSS(R)SINCAL V22.0 vers:all/* (CVE-2026-84854)\n\nPSS(R)SINCAL V22.5 vers:intdot/<22.5.5 (CVE-2026-84854)\n\nCVSS\nVendor\nEquipment\n\nv3 7\nSiemens\nPSS(R)SINCAL V21.5\n\n1 Vulnerability\n\nOut-of-bounds Write\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities", "language": "en" }, { "id": "E55", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-07", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "ected Products\n\nSIMATIC IPC BX-21A < V31.01.13\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\n\nNote: After upgrading to the fixed BIOS version, users must load the BIOS default settings. If Secure Boot keys were already provisioned, they must be provisioned again afterwards.\n\nMitigation\nAs a temporary mitigation, users can manually remove the test key from the database (e.g., \"DO NOT TRUST - AMI Test PK\" for RW-543A or \"insyde-ElkhartLake\" for IPC227G/277G/327G/377G and BX-21A). Note: Loading default settings will restore the test key, so upgrading remains recommended.\n\nVendor fix\nUpdate to V31.01.13 or later version\n\nSIMATIC IPC RW-543A < V1.1.4\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\n\nNote: After upgrading to the fixed BIOS version, users must load the BIOS default settings. If Secure Boot keys were already provisioned, they must be provisioned again afterwards.\n\nMitigation\nAs a temporary mitigation, users can manually remove the test key from the database (e.g., \"DO NOT TRUST - AMI Test PK\" for RW-543A or \"insyde-ElkhartLake\" for IPC227G/277G/327G/377G and BX-21A). Note: Loading default settings will restore the test key, so upgrading remains recommended.\n\nVendor fix\nUpdate to V1.1.4 or later version\n\nSIMATIC IPC227G / IPC277G /", "language": "en" }, { "id": "E56", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "ucts\n\nIndustrial Edge Device Kit - arm64 V1.10\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.19\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.20\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.21\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.22\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNo fix planned\nCurrently no fix is planned\n\nIndustrial Edge Device Kit - arm64 V1.23\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted", "language": "en" }, { "id": "E57", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "to the latest version.\n\nThe following versions of Siemens SIMATIC S7 Webserver API are affected:\n\n.NET Client Library for SIMATIC S7 Webserver API vers:intdot/<3.3.61, vers:intdot/<3.3.62 (CVE-2026-85114, CVE-2026-85115)\n\nCVSS\nVendor\nEquipment\n\nv3 7.5\nSiemens\n.NET Client Library for SIMATIC S7 Webserver API\n\n2 Vulnerabilities\n\nImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Generation of Error Message Containing Sensitive Information\n\nBackground\n\nCritical Infrastructure", "language": "en" }, { "id": "E58", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Library for SIMATIC S7 Webserver API < V3.3.61\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V3.3.61 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\n\nView CVE Details\n\nCVE-2026-85115\n\nAffected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtain the plaintext restore password and potentially perform unauthorized operations on the PLC.\n\nRead More\n\n2 Affected Products\n\n.NET Client Library for SIMATIC S7 Webserver API < V3.3.61\n\nProduct Status: known_affected\n\nRemediations\n\n.NET Client Library for SIMATIC S7 Webserver API < V3.3.62\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nUpdate to V3.3.62 or later version\n\nAdditional Metrics\n\nRelevant CWE: CWE-209 Generation of Error Message Containing Sensitive Information\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\n\nView CVE Details", "language": "en" }, { "id": "E59", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "r fixes and recommends mitigations for products where fixes are not or not yet available.\n\nThe following versions of Siemens WinCC are affected:\n\nSIMATIC WinCC V7.5 vers:all/* (CVE-2026-59241)\n\nSIMATIC WinCC V8.0 vers:intdot/<8.0.0.11 (CVE-2026-59241)\n\nSIMATIC WinCC V8.1 vers:intdot/<8.1.7 (CVE-2026-59241)\n\nCVSS\nVendor\nEquipment\n\nv3 8.8\nSiemens\nSIMATIC WinCC V7.5\n\n1 Vulnerability\n\nIncorrect Privilege Assignment\n\nBackground\n\nCritical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and", "language": "en" }, { "id": "E60", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "518-4 PN/DP MFP (6ES7518-4AX00-1AB0) >= V3.1.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.\n\nMitigation\nOnly build and run applications from trusted sources.\n\nNone available\nCurrently no fix is available\n\nSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) >= V3.1.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.\n\nMitigation\nOnly build and run applications from trusted sources.\n\nNone available\nCurrently no fix is available\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) >= V3.1.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.\n\nMitigation\nOnly build and run applications from trusted sources.\n\nNone available\nCurrently no fix is available\n\nSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) >= V3.1.7\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.\n\nMitigation\nOnly build and run applications", "language": "en" }, { "id": "E61", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-16", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.\n\nMitigation\nOnly build and run applications from trusted sources.\n\nNone available\nCurrently no fix is available\n\nAdditional Metrics\n\nRelevant CWE: CWE-20 Improper Input Validation\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\nView CVE Details\n\nCVE-2023-52927\n\nCVE-2023-53292\n\nCVE-2023-54271\n\nCVE-2024-26982\n\nCVE-2024-36922\n\nCVE-2024-40945\n\nCVE-2024-47809\n\nCVE-2024-49998\n\nCVE-2024-53166\n\nCVE-2024-56647\n\nCVE-2024-56657\n\nCVE-2024-56719\n\nCVE-2024-57977\n\nCVE-2024-57979\n\nCVE-2024-57980\n\nCVE-2024-57981\n\nCVE-2024-57986\n\nCVE-2024-57993\n\nCVE-2024-57996\n\nCVE-2024-58002\n\nCVE-2024-58005\n\nCVE-2024-58009\n\nCVE-2024-58013\n\nCVE-2024-58014\n\nCVE-2024-58017\n\nCVE-2024-58020\n\nCVE-2024-58058\n\nCVE-2024-58061\n\nCVE-2024-58063\n\nCVE-2024-58068\n\nCVE-2024-58071\n\nCVE-2024-58072\n\nCVE-2024-58077\n\nCVE-2024-58079\n\nCVE-2024-58083\n\nCVE-2025-21682\n\nCVE-2025-21700\n\nCVE-2025-21702\n\nCVE-2025-21703\n\nCVE-2025-21704\n\nCVE-2025-21705\n\nCVE-2025-21706\n\nCVE-2025-21707\n\nCVE-2025-21708\n\nCVE-2025-21716\n\nCVE-2025-21719\n\nCVE-2025-21724\n\nCVE-2025-", "language": "en" }, { "id": "E62", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "ct\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nAdditional Metrics\n\nRelevant CWE: CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n4.6\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L\n\nView CVE Details\n\nCVE-2026-33388\n\nAn access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential values are not directly visible, but the user can delete entries or edit their properties. An attacker who deletes or edits an entry can disrupt authentication for dependent devices, and one who manipulates an entry's configuration may be able to indirectly obtain the credentials.\n\nRead More\n\n2 Affected Products\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affected\n\nRemediations\n\nVendor fix\nContact customer support to receive patch and update information\n\nRUGGEDCOM APE1808 with Nozomi Guardian/CMC\n\nProduct Status: known_affecte", "language": "en" }, { "id": "E63", "sourceUrl": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "cbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist Note that there are three settings: \"Disabled\", which means that client communications do not use TLS. \"Enabled\", which means that client communications may use TLS (but they also may not) and \"Required\", which forces all client communications to use TLS.\n\nMitigation\nInterSystems documentation explains how to configure the server to require TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver\n\nMitigation\nFor more information about how to configure a system to mitiga", "language": "en" }, { "id": "E64", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-17", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Industrial Edge Cloud Device (IECD) < V1.28.1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.1 or later version\n\nIndustrial Edge Own Device (IEOD) < V1.28.1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.1 or later version\n\nIndustrial Edge Virtual Device (IEVD) < V1.28.1\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nVendor fix\nUpdate to V1.28.1 or later version\n\nSCALANCE LPE9413 (6GK5998-3GS01-2AC2)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSCALANCE LPE9433 (6GK5998-3GS11-2AC2)\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to affected products is limited to trusted parties only\n\nNone available\nCurrently no fix is available\n\nSIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2) < V1.28.1-2\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nEnsure network access to af", "language": "en" }, { "id": "E65", "sourceUrl": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "Affected Product\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nAdditional Metrics\n\nRelevant CWE: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H\n\n4.0\n9.4\nCRITICAL\nCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\n\nView CVE Details\n\nCVE-2026-111100\n\nThe ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting vulnerable devices and preparing targeted credential attacks.\n\nRead More\n\n2 Affected Products\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/\n\nKiloview E3 Firmware: <1.30\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nKiloView recommends u", "language": "en" }, { "id": "E66", "sourceUrl": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01", "sourceField": "article:summary-vulnerabilities-remediations", "excerpt": "ion InterSystems IRIS for Health: 2026.2.0.221\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nInterSystems recommends users configure IRIS superserver to require SSL/TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist Note that there are three settings: \"Disabled\", which means that client communications do not use TLS. \"Enabled\", which means that client communications may use TLS (but they also may not) and \"Required\", which forces all client communications to use TLS.\n\nMitigation\nInterSystems documentation explains how to configure the server to require TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver\n\nMitigation\nFor more information about how to configure a system to mitigate this vulnerability, contact InterSystems at their world wide response center: https://wrc.intersystems.com (login required)\n\nInterSystems Corporation InterSystems IRIS for Health: 2026.1.0.235\n\nProduct Status: known_affected\n\nRemediations\n\nMitigation\nInterSystems recommends users configure IRIS superserver to require SSL/TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist Note that there are three settings: \"Di", "language": "en" } ], "summaryEvidenceIds": [ "E1", "E2", "E3", "E65", "E5", "E52", "E7", "E53", "E9", "E10", "E11", "E12", "E14", "E15", "E55", "E17", "E19", "E20", "E56", "E23", "E58", "E25", "E60", "E29", "E31", "E35", "E37", "E38", "E32", "E34", "E27", "E61", "E39", "E64", "E43", "E62", "E44", "E66" ], "riskEvidenceIds": [ "E1", "E2", "E3", "E65", "E5", "E52", "E7", "E53", "E9", "E10", "E11", "E12", "E14", "E15", "E55", "E17", "E19", "E20", "E56", "E23", "E58", "E25", "E60", "E29", "E31", "E35", "E37", "E38", "E32", "E34", "E27", "E61", "E39", "E64", "E43", "E62", "E44", "E66" ], "glossary": [ { "term": "SQLインジェクション", "meaning": "入力した値がデータベースへの命令として扱われ、意図しない問い合わせや操作をされる問題です。読み取り・書き換えなど、可能なことは脆弱性ごとに異なります。", "sourceUrl": "https://cwe.mitre.org/data/definitions/89.html", "kind": "general_definition" } ] } } }